Ritesh Raj Sarraf wrote: > Agreed. But instead why not think the other way. > The default configuration shouldn't allow symlink access. If people need it, > it should get explicitly mentioned in their config.
If the default configuration should disallow symlinks, then this what the patch should say, instead of doing host-based access. As a patch, I would have expected this to be formulated as a diff file against the sources, also. Regards, Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
