diff --git a/internal/server/server.go b/internal/server/server.go
index f130c8f..72dc1cc 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -1038,6 +1038,9 @@ func (s *Server) registerStaticHandlersWithLocationEngine(cfg *config.ServerConf
 			staticHandler.SetGzipStatic(true, cfg.Compression.GzipStaticExtensions)
 		}
 
+		// 设置符号链接安全检查
+		staticHandler.SetSymlinkCheck(static.SymlinkCheck)
+
 		// 根据 LocationType 注册路由
 		locType := static.LocationType
 		if locType == "" {
@@ -1383,6 +1386,9 @@ func (s *Server) registerStaticHandlers(router *handler.Router, cfg *config.Serv
 			staticHandler.SetGzipStatic(true, cfg.Compression.GzipStaticExtensions)
 		}
 
+		// 设置符号链接安全检查
+		staticHandler.SetSymlinkCheck(static.SymlinkCheck)
+
 		// 设置 try_files 配置
 		if len(static.TryFiles) > 0 {
 			// 注意：tryFilesPass 需要路由器支持，当前实现传入 nil