Don't serve statically-compiled `.gz` files that are symlinks

1 files changed, 2 insertions, 2 deletions

diff --git a/domain.go b/domain.go
index 45e59f94..358a71d8 100644
--- a/domain.go
+++ b/domain.go
@@ -41,8 +41,8 @@ func handleGZip(w http.ResponseWriter, r *http.Request, fullPath string) string
 
 	gzipPath := fullPath + ".gz"
 
-	_, err := os.Stat(gzipPath)
-	if err != nil {
+	// Ensure the .gz file is not a symlink
+	if fi, err := os.Lstat(gzipPath); err != nil || !fi.Mode().IsRegular() {
 		return fullPath
 	}