Comment 9 for bug 1430750

Jonas,

for sure the suggested change is not the perfect solution and without any doubt there are many better ways to achieve the goal.
Unfortunately I do not have the time to evaluate all possible options, I just wanted to suggest a change to provide a default configuration (which is as close to the one debian provides) which does not expose files outside from /var/www.

Just take it as a suggestion and feel free (or someone other) to provide a better solution.