github
/
gixy
mirror of https://github.com/yandex/gixy
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
128 Commits
5 Branches
10 Tags
974 KiB
Commit Graph

128 Commits (12d2ddb902784d5418bbdf3ff9ee8a564b3c4867)

Author SHA1 Message Date
Disconnect3d 12d2ddb902
Update requirements.txt 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2021-11-01 20:28:33 +01:00
Disconnect3d e4a9609f79
Fix pyparsing version due to incompatibility with 3.x 
TL;DR: gixy does not work with latest pyparsing (3.x) versions, it fails with bogus parsing errors like:
> ERROR	Failed to parse config "/etc/nginx/nginx.conf": char 5 (line:1, col:6)

or similar.
 2021-11-01 15:04:36 +01:00
InnovativeInventor 641060d635 Updated Dockerfile for Python3 2020-01-09 11:18:46 +03:00
florianjacob 5106919192 correct minor spelling mistake 2019-10-23 17:51:34 +03:00
Andrew Krasichkov 5a67dc3af5 Drop Python 2.6 Support 2019-07-10 00:10:42 +03:00
Pascal Bach fa9315ca6a Add hint toaliastraversal documentation 
Document on what to do if an alias points to a file and should thus not end with a /
 2019-07-08 22:28:35 +03:00
mschwager 3b2713b537 Bump maintained year 
Since the last commit was 11 days ago I'm going to assume this is still maintained :)
 2019-04-21 13:34:52 +03:00
Jelle van der Waa 8c492ebaba Don't require argparse for Python >= 3.2 
argparse was included in the stdlib of Python in version 3.2.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
 2019-04-05 12:50:49 +03:00
Andrew Krasichkov 340f715f00 Fixed invalid escape sequences 2018-11-22 10:15:29 +03:00
Daniel M. Capella cbc7f91f4b Publish tests 
To be able to run the tests prior to installation, as part of building a distro package.
 2018-11-22 09:09:54 +03:00
Andrew Krasichkov 9f3c5768f8 bump version 2018-09-28 11:02:38 +03:00
Andrew Krasichkov d3b77216c4 minor style fixes 2018-09-28 11:02:08 +03:00
Andrew Krasichkov f92423ea71 Added python 3.7 2018-09-28 11:01:34 +03:00
Andrew Krasichkov c0dd214e61 Try to deal with non latin encoding 2018-09-28 11:00:13 +03:00
Andrew Krasichkov 84f79a3e04 Try to parse inline comment in blocks 2018-09-28 11:00:02 +03:00
Fernando Tapia Rico 0e032605b5 Add perl_set directive 
Defined in the ngx_http_perl_module
 2018-09-28 10:59:47 +03:00
Andrey Tikhonov f5a54ad161 Added tests for GeoBlock 2018-04-17 16:45:57 +03:00
Andrey Tikhonov 82508941bd Added test for MapBlock 2018-04-17 16:45:57 +03:00
Andrey Tikhonov 6f0edbc980 Added support for 'geo' blocks 2018-04-17 16:45:57 +03:00
Andrew Krasichkov 5a6cb2c3d0
Update hostspoofing.md 2018-04-04 15:41:33 +03:00
Andrew Krasichkov 86b5e60d6b Bump version to 0.1.9 2018-03-02 15:16:18 +03:00
Andrew Krasichkov 2c44989f4a Exclude CR from HTTP Request splitting 2018-03-02 15:15:30 +03:00
Andrew Krasichkov 902e739106
Update README.RU.md 2018-03-02 13:31:58 +03:00
Andrew Krasichkov 15f5fcef23
Update README.md 2018-03-02 13:31:51 +03:00
Andrew Krasichkov 020f6b08e8 Version bump to 0.1.8 2017-11-10 12:28:35 +03:00
Yoav Tzelnick 0f9b192c13 Syntax error in configuration now fails the manager. making the exit code 1 on syntax error 2017-11-10 12:25:06 +03:00
Andrew Krasichkov ea7d771ab6 [alias_traversal] Minor improvements + respects path in the alias directive: 
- alias /foo/bar/ -> HIGH severity
  - alias /foo/bar -> MEDIUM severity
 2017-11-10 12:22:39 +03:00
Screeny 2a922f37cc minor grammar fix 2017-11-03 17:56:32 +03:00
Andrew Krasichkov 0110b4e7a9 Version up to 0.1.7 2017-10-10 15:12:36 +03:00
Andrew Krasichkov 05d4915901 [http_splitting] Better reason message 2017-10-10 15:12:16 +03:00
Andrew Krasichkov ddd232a6b1 Version up to 0.1.6 2017-10-10 15:02:58 +03:00
Andrew Krasichkov fd4c731c8a [alias_traversal] minor documentation improvements 2017-10-10 15:02:09 +03:00
Andrew Krasichkov 1f9a65a197 [alias_traversal] Added documentation 2017-10-10 15:02:09 +03:00
Andrew Krasichkov d00a58e467 [alias_traversal] Added tests 2017-10-10 15:02:09 +03:00
Andrew Krasichkov 49309996fb First try to implement path traversal detection (via alias) 2017-10-10 15:02:09 +03:00
Andrew Krasichkov acba288be7 [http_splitting] also checks CR injection 2017-10-10 14:18:44 +03:00
Daniel M. Capella b14934d3ba Use nose setuptools integration 
https://nose.readthedocs.io/en/latest/setuptools_integration.html
 2017-07-06 19:51:39 +03:00
Andrew Krasichkov ffbba62b41 More test cases for if parsing 2017-07-06 19:48:29 +03:00
Andrew Krasichkov 04dfa39a54 Better if condition parsing 2017-07-06 19:48:29 +03:00
Andrew Krasichkov e947fd16b4 #65: Fixed origin regex in documentation 2017-07-06 19:24:24 +03:00
Tommy Brunn 7360ee0adb Document Docker usage 2017-06-05 11:56:12 +03:00
orf d4e3d5285e Test on PyPy 2 and 3 2017-06-02 19:58:04 +03:00
buglloc f5fd81c0db Version bump to 0.1.5 2017-05-21 23:10:32 +03:00
buglloc ea1fb2e658 Show file paths in console/text templates only if we analyzed more then 1 config 2017-05-21 23:03:04 +03:00
buglloc ca0dca94cf Better regex parsing error message 2017-05-19 20:15:38 +03:00
Andrew Krasichkov 6f360bc16d Minor templates improvements (#54) 2017-05-19 19:50:53 +03:00
Andrew Krasichkov 183aae602b Deal with severity issue overriding (#53) 2017-05-19 19:47:02 +03:00
Andrew Krasichkov 9643318c93 Checks file existing before opening by parser (#52) 2017-05-19 19:31:39 +03:00
Andrew Krasichkov e477e02350 Support multiple config files (#47) 2017-05-19 19:31:20 +03:00
Andrew Krasichkov 2ea357ea7b Merge pull request #44 from yandex/nonstrict-encoding 
Autodetect config encoding
 2017-05-16 23:05:28 +03:00