web commit by JeroenSchot

[git.ikiwiki.info.git] / doc / security.mdwn

diff --git a/doc/security.mdwn b/doc/security.mdwn
index 0f8861d0dbb6f99f5857828f5bd71f7453048d66..3743adea1e61b5225520d4f889b80d0208ad0ca3 100644 (file)
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -161,7 +161,8 @@ page from the web, which follows the symlink when reading the page, and
 again when saving the changed page.
 
 This was fixed by making ikiwiki refuse to read or write to files that are
 again when saving the changed page.
 
 This was fixed by making ikiwiki refuse to read or write to files that are

-symlinks, combined with the above locking.
+symlinks, or that are in subdirectories that are symlinks, combined with
+the above locking.

 
 ## underlaydir override attacks
 
 
 ## underlaydir override attacks