diff --git a/docs/en/plugins/aliastraversal.md b/docs/en/plugins/aliastraversal.md index 42e802f..501712e 100644 --- a/docs/en/plugins/aliastraversal.md +++ b/docs/en/plugins/aliastraversal.md @@ -23,3 +23,4 @@ In other words, the incorrect configuration of `alias` could allow an attacker t It's pretty simple: - you must find all the `alias` directives; - make sure that the parent prefixed location ends with directory separator. + - or if you want to map a signle file make sure the location starts with a `=`, e.g `=/i.gif` instead of `/i.gif`.