update todo

2 files changed, 3 insertions, 1 deletions

diff --git a/TODO.md b/TODO.md
index 7baab1e..567c129 100644
--- a/TODO.md
+++ b/TODO.md
@@ -5,6 +5,8 @@
 * FastCGI Interface
 * Docker support - requires sub folder off root
 * Web folder with no index, on a separate port?
+* Use custom FS implementation to resolve and deny symlinks outside of srv directory
+https://github.com/crazcalm/go/commit/8b0b644cd02c59fe2461908304c44d64e8be431e
 
 ## Security
 * userless/guest read-only mode, user rw
diff --git a/wfm.go b/wfm.go
index fc27abf..949f94e 100644
--- a/wfm.go
+++ b/wfm.go
@@ -34,7 +34,7 @@ var (
 	aboutRnt    = flag.Bool("about_runtime", true, "Display runtime info in About Dialog")
 	showDot     = flag.Bool("show_dot", false, "show dot files and folders")
 	wfmPfx      = flag.String("prefix", "/", "Default prefix for WFM access")
-	docSrv      = flag.String("doc_srv", "", "Serve regular http files, fsdir:prefix, eg /var/www:/home")
+	docSrv      = flag.String("doc_srv", "", "Serve regular http files, fsdir:prefix, eg /var/www/:/home/")
 	cacheCtl    = flag.String("cache_ctl", "no-cache", "HTTP Header Cache Control")
 	acmDir      = flag.String("acm_dir", "", "autocert cache, eg: /var/cache (inside chroot)")
 	acmBind     = flag.String("acm_addr", "", "autocert manager listen address, eg: :80")