improve fix for symlink attacks to check subdirectories for symlinks too