Question on disable_symlinks

[ehaufler]

Hi,
We would like to use the nginx-dav-ext-module with the nginx server (1.21) on a linux machine.
For security reasons, we would like to forbid to follow symbol links (e.g. for the case of accidental symbol links to directories like root / ).
The nginx directive “disable_symlinks“ looked promising, (although not yet working completely in the ngx-dav-module).

The disable_symlinks directive seems not to be used yet in the nginx-dav-ext-module.

• Are there other settings to improve the handling of symbol links?
• Or could the support of the disable_symlinks be added in nginx-dav-ext (probably by ourselves, if it was not done already by someone else) ?

Thanks for any hints!
Eckart