Is there a way to disable symbolic links for nginx auto-indexed directory?

Question

I would like to configure nginx to list and serve bulk files from a select directory (autoindex on option). However I worry that if a symbolic link will be accidentally placed in such a directory, all files in the filesystem may become externally exposed (for example by a symbolic link to /).

Is there a way to avoid this?

score 3 · Accepted Answer · answered Oct 25 '12 at 16:20

3

Use the disable_symlinks directive:

disable_symlinks on

answered Oct 25 '12 at 16:20

Andy

5,230
1
24
34

note that this parameter is only available from 1.1.16. – edogawaconan Oct 26 '12 at 16:13

Is there a way to disable symbolic links for nginx auto-indexed directory?

1 Answers1