new file mode 100644
--- /dev/null
+++ b/http_disable_symlinks.t
@@ -0,0 +1,223 @@
+#!/usr/bin/perl
+
+# (C) Andrey Belov
+
+# Tests for disable_symlinks directive.
+
+###############################################################################
+
+use warnings;
+use strict;
+
+use Test::More;
+use POSIX;
+
+BEGIN { use FindBin; chdir($FindBin::Bin); }
+
+use lib 'lib';
+use Test::Nginx;
+
+###############################################################################
+
+select STDERR; $| = 1;
+select STDOUT; $| = 1;
+
+my $t = Test::Nginx->new()->has(qw/http rewrite/)
+	->write_file_expand('nginx.conf', <<'EOF');
+
+%%TEST_GLOBALS%%
+
+daemon         off;
+
+events {
+}
+
+http {
+    %%TEST_GLOBALS_HTTP%%
+
+    server {
+        listen       127.0.0.1:8080;
+        server_name  s1;
+
+        location /on/ {
+            disable_symlinks on;
+        }
+
+        location /not_owner/ {
+            disable_symlinks if_not_owner;
+        }
+
+        location /try_on/ {
+            disable_symlinks on;
+            try_files $uri $uri.html =404;
+        }
+
+        location /try_not_owner/ {
+            disable_symlinks if_not_owner;
+            try_files $uri $uri.txt =404;
+        }
+
+        location /if_on/ {
+            disable_symlinks on;
+            if (-f $request_filename) {
+                return 204;
+            }
+        }
+
+        location /if_not_owner/ {
+            disable_symlinks if_not_owner;
+            if (-f $request_filename) {
+                return 204;
+            }
+        }
+    }
+
+    server {
+        listen       127.0.0.1:8080;
+        server_name  s2;
+
+        open_file_cache max=16 inactive=60s;
+        open_file_cache_valid 30s;
+        open_file_cache_min_uses 1;
+        open_file_cache_errors on;
+
+        location /cached-off/ {
+            disable_symlinks off;
+            alias %%TESTDIR%%/cached/;
+        }
+
+        location /cached-on/ {
+            disable_symlinks on;
+            alias %%TESTDIR%%/cached/;
+        }
+
+        location /cached-if-not-owner/ {
+            disable_symlinks if_not_owner;
+            alias %%TESTDIR%%/cached/;
+        }
+
+        location / {
+            disable_symlinks off;
+        }
+    }
+}
+
+EOF
+
+eval {
+	open OLDERR, ">&", \*STDERR; close STDERR;
+	$t->run();
+	open STDERR, ">&", \*OLDERR;
+};
+plan(skip_all => 'no disable_symlinks') if $@;
+
+my $uid = getuid();
+
+my @extfiles = ('/etc/resolv.conf', '/etc/protocols', '/etc/host.conf');
+my $extfile = undef;
+
+foreach (@extfiles) {
+	if (-f "$_" && $uid != (stat($_))[4]) {
+		$extfile = $_;
+		last;
+	}
+}
+
+if (defined($extfile)) {
+	$t->plan(17);
+} else {
+	plan(skip_all => 'external suitable object not found');
+}
+
+my $d = $t->testdir();
+
+mkdir("$d/on");
+mkdir("$d/not_owner");
+mkdir("$d/try_on");
+mkdir("$d/try_not_owner");
+mkdir("$d/if_on");
+mkdir("$d/if_not_owner");
+mkdir("$d/cached");
+
+$t->write_file("empty.html", "");
+symlink("empty.html", "$d/link");
+symlink($extfile, "$d/link2");
+
+$t->write_file("on/empty.html", "");
+symlink("empty.html", "$d/on/link");
+symlink($extfile, "$d/on/link2");
+
+$t->write_file("not_owner/empty.html", "");
+symlink("empty.html", "$d/not_owner/link");
+symlink($extfile, "$d/not_owner/link2");
+
+$t->write_file("try_on/try.html", "LOCAL TRY");
+symlink($extfile, "$d/try_on/try");
+
+$t->write_file("try_not_owner/try.html", "LOCAL TRY");
+symlink($extfile, "$d/try_not_owner/try");
+symlink("try.html", "$d/try_not_owner/try.txt");
+
+$t->write_file("if_on/empty.html", "");
+symlink("empty.html", "$d/if_on/link");
+symlink($extfile, "$d/if_on/link2");
+
+$t->write_file("if_not_owner/empty.html", "");
+symlink("empty.html", "$d/if_not_owner/link");
+symlink($extfile, "$d/if_not_owner/link2");
+
+symlink($extfile, "$d/cached/link");
+
+###############################################################################
+
+like(http_get_host('s1', '/link'), qr!200 OK!, 'static (off, same uid)');
+like(http_get_host('s1', '/link2'), qr!200 OK!, 'static (off, other uid)');
+
+like(http_get_host('s1', '/on/link'), qr!403 Forbidden!,
+	'static (on, same uid)');
+like(http_get_host('s1', '/on/link2'), qr!403 Forbidden!,
+	'static (on, other uid)');
+
+like(http_get_host('s1', '/not_owner/link'), qr!200 OK!,
+	'static (if_not_owner, same uid)');
+like(http_get_host('s1', '/not_owner/link2'), qr!403 Forbidden!,
+	'static (if_not_owner, other uid)');
+
+like(http_get_host('s1', '/try_on/try'), qr/LOCAL TRY/,
+	'try_files (on)');
+like(http_get_host('s1', '/try_not_owner/try'), qr/LOCAL TRY/,
+	'try_files (if_not_owner)');
+
+like(http_get_host('s1', '/if_on/link'), qr!403 Forbidden!,
+	'if (on, same uid)');
+like(http_get_host('s1', '/if_on/link2'), qr!403 Forbidden!,
+	'if (on, other uid)');
+
+like(http_get_host('s1', '/if_not_owner/link'), qr!204 No Content!,
+	'if (if_not_owner, same uid)');
+like(http_get_host('s1', '/if_not_owner/link2'), qr!403 Forbidden!,
+	'if (if_not_owner, other uid)');
+
+like(http_get_host('s2', '/cached-off/link'), qr!200 OK!,
+	'open_file_cache (pass #1)');
+like(http_get_host('s2', '/cached-on/link'), qr!403 Forbidden!,
+	'open_file_cache (pass #2)');
+like(http_get_host('s2', '/cached-off/link'), qr!200 OK!,
+	'open_file_cache (pass #3)');
+like(http_get_host('s2', '/cached-if-not-owner/link'), qr!403 Forbidden!,
+	'open_file_cache (pass #4)');
+like(http_get_host('s2', '/cached-off/link'), qr!200 OK!,
+	'open_file_cache (pass #5)');
+
+###############################################################################
+
+sub http_get_host {
+	my ($host, $url) = @_;
+	return http(<<EOF);
+GET $url HTTP/1.0
+Host: $host
+
+EOF
+}
+
+###############################################################################