Hacker GitHub

← All repos

yandex/gixy

View on GitHub ↗ ★ 8,562 Python

Nginx configuration static analyzer

11 mentions on Hacker News by 11 people: 5 stories, 6 comments · first 2017-04-28 · latest 2023-08-23

Mentions per year 11 mentions · busiest year 2023 (4)
20082026
AllStoriesComments NewestTopOldest
  1. Use this static analyzer to check for such mistakes: https://github.com/yandex/gixy
    comment by asimops · 2023-08-23 · in If is Evil when used in location context (2015)
  2. FWIW gixy (nginx configuration checker) catches this: https://github.com/yandex/gixy/blob/master/docs/en/plugins/a... (and nixos automatically runs gixy on a configuration generated through it, so the system refuses to build <3)
    comment by evgpbfhnr · 2023-07-04 · in Hunting for Nginx alias traversals in the wild
  3. …seemingly innocuous '/' is the difference between a path traversal vulnerability or not. [0]: https://github.com/yandex/gixy#what-it-can-do
    comment by schwag09 · 2022-02-23 · in Avoiding the top Nginx configuration mistakes
  4. Though deprecated, https://github.com/yandex/gixy is a nice checker for these kind of issues.
    comment by bennofs · 2021-02-25 · in Common Nginx misconfigurations that leave your web server open to attack
  5. …tooling that has been developed to manage Nginx: https://www.digitalocean.com/community/tools/nginx https://github.com/yandex/gixy This is not a criticism of Nginx per se, it comes from a time when Apache is the only other alternative and…
    comment by narrationbox · 2020-05-04 · in Show HN: Caddy 2
  6. …behaved like that, I highly suggest trying this tool on your configs and seeing what it reports. 1. https://github.com/yandex/gixy/blob/master/docs/en/plugins/a...
    comment by orf · 2017-05-11 · in Gixy: Nginx Configuration Static Analyzer