DEV Community

Danila Vershinin
Danila Vershinin

Posted on Originally published at github.com

Gixy v0.2.55: release notes

Gixy v0.2.55 is available. Gixy analyzes NGINX configurations for security issues.

Release notes

Fixed

  • Crash on directives nginx itself would reject: A directive with an argument count nginx refuses to load - such as the bare proxy_pass; that NixOS's nixosTests.nginx deliberately generates through writeNginxConfig - crashed gixy with IndexError in the ssrf/proxy_pass_normalized plugins (typed directives like add_header; failed earlier, at parse time). The parser now validates argument counts against nginx's own arity rules (via the bundled crossplane analyzer) and skips such directives with a warning: nginx would never load that config, so the directive cannot influence runtime behavior. This unblocks the nixpkgs gixy 0.2.x upgrade reverted in NixOS/nixpkgs#568041.

Release and downloads | Source repository

Top comments (0)