Mercurial > hg > nginx-site
comparison xml/en/docs/http/ngx_http_core_module.xml @ 438:b27974b92a58
- corrected the description of the from= parameter of the
disable_symlinks directive, added a note about modules
that do not currently respect this directive
- mentioned that ngx_http_addition_module's directives also
make internal requests
author | Ruslan Ermilov <ru@nginx.com> |
---|---|
date | Thu, 01 Mar 2012 16:46:47 +0000 |
parents | 3a9f39341c7c |
children | b423d725a932 |
comparison
equal
deleted
inserted
replaced
437:fd183bec1830 | 438:b27974b92a58 |
---|---|
467 <directive name="disable_symlinks"> | 467 <directive name="disable_symlinks"> |
468 <syntax><literal>off</literal></syntax> | 468 <syntax><literal>off</literal></syntax> |
469 <syntax> | 469 <syntax> |
470 <literal>on</literal> | | 470 <literal>on</literal> | |
471 <literal>if_not_owner</literal> | 471 <literal>if_not_owner</literal> |
472 [<literal>from</literal>=<value>prefix</value>]</syntax> | 472 [<literal>from</literal>=<value>part</value>]</syntax> |
473 <default>off</default> | 473 <default>off</default> |
474 <context>http</context> | 474 <context>http</context> |
475 <context>server</context> | 475 <context>server</context> |
476 <context>location</context> | 476 <context>location</context> |
477 <appeared-in>1.1.15</appeared-in> | 477 <appeared-in>1.1.15</appeared-in> |
497 Access to a file is denied if any component of the pathname | 497 Access to a file is denied if any component of the pathname |
498 is a symbolic link, and the link and object that the link | 498 is a symbolic link, and the link and object that the link |
499 points to have different owners. | 499 points to have different owners. |
500 </tag-desc> | 500 </tag-desc> |
501 | 501 |
502 <tag-name><literal>from</literal>=<value>prefix</value></tag-name> | 502 <tag-name><literal>from</literal>=<value>part</value></tag-name> |
503 <tag-desc> | 503 <tag-desc> |
504 When checking symbolic links | 504 When checking symbolic links |
505 (parameters <literal>on</literal> and <literal>if_not_owner</literal>), | 505 (parameters <literal>on</literal> and <literal>if_not_owner</literal>), |
506 each component of the pathname is normally checked. | 506 all components of the pathname are normally checked. |
507 If however the | 507 Checking of symbolic links in the initial part of the pathname |
508 <literal>from</literal>=<value>prefix</value> is also given, | 508 may be avoided by also specifying the |
509 symbolic links are checked only from the component of the pathname | 509 <literal>from</literal>=<value>part</value> parameter. |
510 specified by <value>prefix</value>. | 510 In this case, symbolic links are checked only from |
511 The <value>prefix</value> value can contain variables. | 511 the component of the pathname following the specified initial part. |
512 If a value is not a prefix of the checked pathname, the whole | 512 If a value is not an initial part of the checked pathname, the whole |
513 pathname is checked as if this parameter was not specified at all. | 513 pathname is checked as if this parameter was not specified at all. |
514 If a value fully matches the file name, | |
515 symbolic links are not checked. | |
516 The parameter value can contain variables. | |
514 </tag-desc> | 517 </tag-desc> |
515 | 518 |
516 </list> | 519 </list> |
517 </para> | 520 </para> |
518 | 521 |
532 <para> | 535 <para> |
533 Parameters <literal>on</literal> and <literal>if_not_owner</literal> | 536 Parameters <literal>on</literal> and <literal>if_not_owner</literal> |
534 add a processing overhead. | 537 add a processing overhead. |
535 <note> | 538 <note> |
536 On systems that do not support opening directories for search only, | 539 On systems that do not support opening directories for search only, |
537 the use of these parameters requires that | 540 the use of these parameters requires that worker processes |
538 worker processes be able to read all intermediate | 541 have read permissions for all checked directories. |
539 directories. | 542 </note> |
543 </para> | |
544 | |
545 <para> | |
546 <note> | |
547 The | |
548 <link doc="ngx_http_autoindex_module.xml">ngx_http_autoindex_module</link>, | |
549 <link doc="ngx_http_random_index_module.xml">ngx_http_random_index_module</link>, | |
550 and <link doc="ngx_http_dav_module.xml">ngx_http_dav_module.xml</link> | |
551 modules currently ignore this directive. | |
540 </note> | 552 </note> |
541 </para> | 553 </para> |
542 | 554 |
543 </directive> | 555 </directive> |
544 | 556 |
700 </listitem> | 712 </listitem> |
701 | 713 |
702 <listitem> | 714 <listitem> |
703 subrequests formed by the | 715 subrequests formed by the |
704 “<command>include virtual</command>” | 716 “<command>include virtual</command>” |
705 command of the module | 717 command of the |
706 <link doc="ngx_http_ssi_module.xml">ngx_http_ssi_module</link>; | 718 <link doc="ngx_http_ssi_module.xml">ngx_http_ssi_module</link> |
719 module and by the | |
720 <link doc="ngx_http_addition_module.xml">ngx_http_addition_module</link> | |
721 module directives; | |
707 </listitem> | 722 </listitem> |
708 | 723 |
709 <listitem> | 724 <listitem> |
710 requests changed by the | 725 requests changed by the |
711 <link doc="ngx_http_rewrite_module.xml" id="rewrite"/> directive. | 726 <link doc="ngx_http_rewrite_module.xml" id="rewrite"/> directive. |