github
/
gixy
mirror of https://github.com/yandex/gixy
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
132 Commits
5 Branches
10 Tags
974 KiB
Commit Graph

132 Commits (b3b10e83520eae77db5f8cd1715d247477cb837d)

Author SHA1 Message Date
anshil b3b10e8352
Merge 1f3c7b7ac5 into 6f68624a75 2025-02-21 00:24:19 -05:00
anshil 1f3c7b7ac5
Update README.md 
Expanded on the description on the project. 
Cleaned up the formatting of the Functionality tab
Rework the installation process
Added information on the different risks that Gixy can detect
 2025-02-21 00:24:05 -05:00
Andrew Krasichkov 6f68624a75 release 0.1.21 2024-01-06 14:35:36 +03:00
Casey Kuball 2d7fff36c6 Fix #125 - Don't install newer versions of pyparsing than v3 2024-01-06 14:24:39 +03:00
Zaytsev Dmitriy e9008dcbd1 removed useless import 2023-01-06 02:27:47 +03:00
plan-do-break-fix 303eb6887d fix(docs): corrects typo in CONTRIBUTING documentation 2023-01-06 02:27:02 +03:00
InnovativeInventor 641060d635 Updated Dockerfile for Python3 2020-01-09 11:18:46 +03:00
florianjacob 5106919192 correct minor spelling mistake 2019-10-23 17:51:34 +03:00
Andrew Krasichkov 5a67dc3af5 Drop Python 2.6 Support 2019-07-10 00:10:42 +03:00
Pascal Bach fa9315ca6a Add hint toaliastraversal documentation 
Document on what to do if an alias points to a file and should thus not end with a /
 2019-07-08 22:28:35 +03:00
mschwager 3b2713b537 Bump maintained year 
Since the last commit was 11 days ago I'm going to assume this is still maintained :)
 2019-04-21 13:34:52 +03:00
Jelle van der Waa 8c492ebaba Don't require argparse for Python >= 3.2 
argparse was included in the stdlib of Python in version 3.2.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
 2019-04-05 12:50:49 +03:00
Andrew Krasichkov 340f715f00 Fixed invalid escape sequences 2018-11-22 10:15:29 +03:00
Daniel M. Capella cbc7f91f4b Publish tests 
To be able to run the tests prior to installation, as part of building a distro package.
 2018-11-22 09:09:54 +03:00
Andrew Krasichkov 9f3c5768f8 bump version 2018-09-28 11:02:38 +03:00
Andrew Krasichkov d3b77216c4 minor style fixes 2018-09-28 11:02:08 +03:00
Andrew Krasichkov f92423ea71 Added python 3.7 2018-09-28 11:01:34 +03:00
Andrew Krasichkov c0dd214e61 Try to deal with non latin encoding 2018-09-28 11:00:13 +03:00
Andrew Krasichkov 84f79a3e04 Try to parse inline comment in blocks 2018-09-28 11:00:02 +03:00
Fernando Tapia Rico 0e032605b5 Add perl_set directive 
Defined in the ngx_http_perl_module
 2018-09-28 10:59:47 +03:00
Andrey Tikhonov f5a54ad161 Added tests for GeoBlock 2018-04-17 16:45:57 +03:00
Andrey Tikhonov 82508941bd Added test for MapBlock 2018-04-17 16:45:57 +03:00
Andrey Tikhonov 6f0edbc980 Added support for 'geo' blocks 2018-04-17 16:45:57 +03:00
Andrew Krasichkov 5a6cb2c3d0
Update hostspoofing.md 2018-04-04 15:41:33 +03:00
Andrew Krasichkov 86b5e60d6b Bump version to 0.1.9 2018-03-02 15:16:18 +03:00
Andrew Krasichkov 2c44989f4a Exclude CR from HTTP Request splitting 2018-03-02 15:15:30 +03:00
Andrew Krasichkov 902e739106
Update README.RU.md 2018-03-02 13:31:58 +03:00
Andrew Krasichkov 15f5fcef23
Update README.md 2018-03-02 13:31:51 +03:00
Andrew Krasichkov 020f6b08e8 Version bump to 0.1.8 2017-11-10 12:28:35 +03:00
Yoav Tzelnick 0f9b192c13 Syntax error in configuration now fails the manager. making the exit code 1 on syntax error 2017-11-10 12:25:06 +03:00
Andrew Krasichkov ea7d771ab6 [alias_traversal] Minor improvements + respects path in the alias directive: 
- alias /foo/bar/ -> HIGH severity
  - alias /foo/bar -> MEDIUM severity
 2017-11-10 12:22:39 +03:00
Screeny 2a922f37cc minor grammar fix 2017-11-03 17:56:32 +03:00
Andrew Krasichkov 0110b4e7a9 Version up to 0.1.7 2017-10-10 15:12:36 +03:00
Andrew Krasichkov 05d4915901 [http_splitting] Better reason message 2017-10-10 15:12:16 +03:00
Andrew Krasichkov ddd232a6b1 Version up to 0.1.6 2017-10-10 15:02:58 +03:00
Andrew Krasichkov fd4c731c8a [alias_traversal] minor documentation improvements 2017-10-10 15:02:09 +03:00
Andrew Krasichkov 1f9a65a197 [alias_traversal] Added documentation 2017-10-10 15:02:09 +03:00
Andrew Krasichkov d00a58e467 [alias_traversal] Added tests 2017-10-10 15:02:09 +03:00
Andrew Krasichkov 49309996fb First try to implement path traversal detection (via alias) 2017-10-10 15:02:09 +03:00
Andrew Krasichkov acba288be7 [http_splitting] also checks CR injection 2017-10-10 14:18:44 +03:00
Daniel M. Capella b14934d3ba Use nose setuptools integration 
https://nose.readthedocs.io/en/latest/setuptools_integration.html
 2017-07-06 19:51:39 +03:00
Andrew Krasichkov ffbba62b41 More test cases for if parsing 2017-07-06 19:48:29 +03:00
Andrew Krasichkov 04dfa39a54 Better if condition parsing 2017-07-06 19:48:29 +03:00
Andrew Krasichkov e947fd16b4 #65: Fixed origin regex in documentation 2017-07-06 19:24:24 +03:00
Tommy Brunn 7360ee0adb Document Docker usage 2017-06-05 11:56:12 +03:00
orf d4e3d5285e Test on PyPy 2 and 3 2017-06-02 19:58:04 +03:00
buglloc f5fd81c0db Version bump to 0.1.5 2017-05-21 23:10:32 +03:00
buglloc ea1fb2e658 Show file paths in console/text templates only if we analyzed more then 1 config 2017-05-21 23:03:04 +03:00
buglloc ca0dca94cf Better regex parsing error message 2017-05-19 20:15:38 +03:00
Andrew Krasichkov 6f360bc16d Minor templates improvements (#54) 2017-05-19 19:50:53 +03:00