Mercurial > hg > nginx-quic
annotate conf/fastcgi.conf @ 4477:7033faf6dc3c
Added disable_symlinks directive.
To completely disable symlinks (disable_symlinks on)
we use openat(O_NOFOLLOW) for each path component
to avoid races.
To allow symlinks with the same owner (disable_symlinks if_not_owner),
use openat() (followed by fstat()) and fstatat(AT_SYMLINK_NOFOLLOW),
and then compare uids between fstat() and fstatat().
As there is a race between openat() and fstatat() we don't
know if openat() in fact opened symlink or not. Therefore,
we have to compare uids even if fstatat() reports the opened
component isn't a symlink (as we don't know whether it was
symlink during openat() or not).
Default value is off, i.e. symlinks are allowed.
author | Andrey Belov <defan@nginx.com> |
---|---|
date | Mon, 13 Feb 2012 16:29:04 +0000 |
parents | 4e2551a83291 |
children | 62869a9b2e7d |
rev | line source |
---|---|
537 | 1 |
3383 | 2 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
537 | 3 fastcgi_param QUERY_STRING $query_string; |
4 fastcgi_param REQUEST_METHOD $request_method; | |
5 fastcgi_param CONTENT_TYPE $content_type; | |
6 fastcgi_param CONTENT_LENGTH $content_length; | |
7 | |
8 fastcgi_param SCRIPT_NAME $fastcgi_script_name; | |
9 fastcgi_param REQUEST_URI $request_uri; | |
10 fastcgi_param DOCUMENT_URI $document_uri; | |
11 fastcgi_param DOCUMENT_ROOT $document_root; | |
12 fastcgi_param SERVER_PROTOCOL $server_protocol; | |
4379
4e2551a83291
Added the HTTPS fastcgi_param to fastcgi.conf.
Valentin Bartenev <vbart@nginx.com>
parents:
3383
diff
changeset
|
13 fastcgi_param HTTPS $https if_not_empty; |
537 | 14 |
15 fastcgi_param GATEWAY_INTERFACE CGI/1.1; | |
1330 | 16 fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; |
537 | 17 |
18 fastcgi_param REMOTE_ADDR $remote_addr; | |
19 fastcgi_param REMOTE_PORT $remote_port; | |
20 fastcgi_param SERVER_ADDR $server_addr; | |
21 fastcgi_param SERVER_PORT $server_port; | |
22 fastcgi_param SERVER_NAME $server_name; | |
23 | |
24 # PHP only, required if PHP was built with --enable-force-cgi-redirect | |
25 fastcgi_param REDIRECT_STATUS 200; |