Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_core_module.xml @ 438:b27974b92a58

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
- corrected the description of the from= parameter of the disable_symlinks directive, added a note about modules that do not currently respect this directive - mentioned that ngx_http_addition_module's directives also make internal requests
author Ruslan Ermilov <ru@nginx.com>
date Thu, 01 Mar 2012 16:46:47 +0000
parents 3a9f39341c7c
children b423d725a932
comparison
equal deleted inserted replaced
437:fd183bec1830 438:b27974b92a58
467 <directive name="disable_symlinks"> 467 <directive name="disable_symlinks">
468 <syntax><literal>off</literal></syntax> 468 <syntax><literal>off</literal></syntax>
469 <syntax> 469 <syntax>
470 <literal>on</literal> | 470 <literal>on</literal> |
471 <literal>if_not_owner</literal> 471 <literal>if_not_owner</literal>
472 [<literal>from</literal>=<value>prefix</value>]</syntax> 472 [<literal>from</literal>=<value>part</value>]</syntax>
473 <default>off</default> 473 <default>off</default>
474 <context>http</context> 474 <context>http</context>
475 <context>server</context> 475 <context>server</context>
476 <context>location</context> 476 <context>location</context>
477 <appeared-in>1.1.15</appeared-in> 477 <appeared-in>1.1.15</appeared-in>
497 Access to a file is denied if any component of the pathname 497 Access to a file is denied if any component of the pathname
498 is a symbolic link, and the link and object that the link 498 is a symbolic link, and the link and object that the link
499 points to have different owners. 499 points to have different owners.
500 </tag-desc> 500 </tag-desc>
501 501
502 <tag-name><literal>from</literal>=<value>prefix</value></tag-name> 502 <tag-name><literal>from</literal>=<value>part</value></tag-name>
503 <tag-desc> 503 <tag-desc>
504 When checking symbolic links 504 When checking symbolic links
505 (parameters <literal>on</literal> and <literal>if_not_owner</literal>), 505 (parameters <literal>on</literal> and <literal>if_not_owner</literal>),
506 each component of the pathname is normally checked. 506 all components of the pathname are normally checked.
507 If however the 507 Checking of symbolic links in the initial part of the pathname
508 <literal>from</literal>=<value>prefix</value> is also given, 508 may be avoided by also specifying the
509 symbolic links are checked only from the component of the pathname 509 <literal>from</literal>=<value>part</value> parameter.
510 specified by <value>prefix</value>. 510 In this case, symbolic links are checked only from
511 The <value>prefix</value> value can contain variables. 511 the component of the pathname following the specified initial part.
512 If a value is not a prefix of the checked pathname, the whole 512 If a value is not an initial part of the checked pathname, the whole
513 pathname is checked as if this parameter was not specified at all. 513 pathname is checked as if this parameter was not specified at all.
514 If a value fully matches the file name,
515 symbolic links are not checked.
516 The parameter value can contain variables.
514 </tag-desc> 517 </tag-desc>
515 518
516 </list> 519 </list>
517 </para> 520 </para>
518 521
532 <para> 535 <para>
533 Parameters <literal>on</literal> and <literal>if_not_owner</literal> 536 Parameters <literal>on</literal> and <literal>if_not_owner</literal>
534 add a processing overhead. 537 add a processing overhead.
535 <note> 538 <note>
536 On systems that do not support opening directories for search only, 539 On systems that do not support opening directories for search only,
537 the use of these parameters requires that 540 the use of these parameters requires that worker processes
538 worker processes be able to read all intermediate 541 have read permissions for all checked directories.
539 directories. 542 </note>
543 </para>
544
545 <para>
546 <note>
547 The
548 <link doc="ngx_http_autoindex_module.xml">ngx_http_autoindex_module</link>,
549 <link doc="ngx_http_random_index_module.xml">ngx_http_random_index_module</link>,
550 and <link doc="ngx_http_dav_module.xml">ngx_http_dav_module.xml</link>
551 modules currently ignore this directive.
540 </note> 552 </note>
541 </para> 553 </para>
542 554
543 </directive> 555 </directive>
544 556
700 </listitem> 712 </listitem>
701 713
702 <listitem> 714 <listitem>
703 subrequests formed by the 715 subrequests formed by the
704 “<command>include virtual</command>” 716 “<command>include virtual</command>”
705 command of the module 717 command of the
706 <link doc="ngx_http_ssi_module.xml">ngx_http_ssi_module</link>; 718 <link doc="ngx_http_ssi_module.xml">ngx_http_ssi_module</link>
719 module and by the
720 <link doc="ngx_http_addition_module.xml">ngx_http_addition_module</link>
721 module directives;
707 </listitem> 722 </listitem>
708 723
709 <listitem> 724 <listitem>
710 requests changed by the 725 requests changed by the
711 <link doc="ngx_http_rewrite_module.xml" id="rewrite"/> directive. 726 <link doc="ngx_http_rewrite_module.xml" id="rewrite"/> directive.