Additional hardening regarding symlink traversal