{"action":"created","issue":{"url":"https://api.github.com/repos/yandex/gixy/issues/25","repository_url":"https://api.github.com/repos/yandex/gixy","labels_url":"https://api.github.com/repos/yandex/gixy/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/yandex/gixy/issues/25/comments","events_url":"https://api.github.com/repos/yandex/gixy/issues/25/events","html_url":"https://github.com/yandex/gixy/issues/25","id":228019789,"number":25,"title":"Allow gixy to accept multiple .config files at once","user":{"login":"orf","id":1027207,"avatar_url":"https://avatars2.githubusercontent.com/u/1027207?v=3","gravatar_id":"","url":"https://api.github.com/users/orf","html_url":"https://github.com/orf","followers_url":"https://api.github.com/users/orf/followers","following_url":"https://api.github.com/users/orf/following{/other_user}","gists_url":"https://api.github.com/users/orf/gists{/gist_id}","starred_url":"https://api.github.com/users/orf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/orf/subscriptions","organizations_url":"https://api.github.com/users/orf/orgs","repos_url":"https://api.github.com/users/orf/repos","events_url":"https://api.github.com/users/orf/events{/privacy}","received_events_url":"https://api.github.com/users/orf/received_events","type":"User","site_admin":false},"labels":[{"id":560917175,"url":"https://api.github.com/repos/yandex/gixy/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2017-05-11T14:53:56Z","updated_at":"2017-05-16T21:41:08Z","closed_at":null,"body":"If you have a few different config files it would be nice to be able to run:\r\n\r\n`gixy *.conf`\r\n\r\nand have it check all config files. To allow this Gixy should be extended to accept any number of config files. It seems like it should be pretty simple to add support for this in the `cli` module."},"comment":{"url":"https://api.github.com/repos/yandex/gixy/issues/comments/301924045","html_url":"https://github.com/yandex/gixy/issues/25#issuecomment-301924045","issue_url":"https://api.github.com/repos/yandex/gixy/issues/25","id":301924045,"user":{"login":"buglloc","id":7323495,"avatar_url":"https://avatars2.githubusercontent.com/u/7323495?v=3","gravatar_id":"","url":"https://api.github.com/users/buglloc","html_url":"https://github.com/buglloc","followers_url":"https://api.github.com/users/buglloc/followers","following_url":"https://api.github.com/users/buglloc/following{/other_user}","gists_url":"https://api.github.com/users/buglloc/gists{/gist_id}","starred_url":"https://api.github.com/users/buglloc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/buglloc/subscriptions","organizations_url":"https://api.github.com/users/buglloc/orgs","repos_url":"https://api.github.com/users/buglloc/repos","events_url":"https://api.github.com/users/buglloc/events{/privacy}","received_events_url":"https://api.github.com/users/buglloc/received_events","type":"User","site_admin":false},"created_at":"2017-05-16T21:41:08Z","updated_at":"2017-05-16T21:41:08Z","body":"Next version of Gixy will accepts multiple config files, e.g.:\r\n```\r\n$ gixy ./tests/plugins/simply/http_splitting/proxy_from_location_*.conf\r\n\r\n==================== Results ===================\r\nFile path: /home/buglloc/work/projects/gixy/tests/plugins/simply/http_splitting/proxy_from_location_var.conf\r\n\r\n>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.\r\n   Description: Using variables that can contain \"\\n\" may lead to http injection.\r\n   Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md\r\n   Reason: At least variable \"$2\" can contain \"\\n\"\r\n   Pseudo config:\r\n\r\nlocation ~ /proxy/(a|b)/(\\W*)$ {\r\n\tproxy_pass http://storage/$2;\r\n}\r\n\r\n--------8<--------8<--------8<--------8<--------\r\n\r\nFile path: /home/buglloc/work/projects/gixy/tests/plugins/simply/http_splitting/proxy_from_location_var_var.conf\r\n\r\n>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.\r\n   Description: Using variables that can contain \"\\n\" may lead to http injection.\r\n   Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md\r\n   Reason: At least variable \"$p\" can contain \"\\n\"\r\n   Pseudo config:\r\n\r\nlocation ~ /proxy/(a|b)/(\\W*)$ {\r\n\tset $p $2;\r\n\tproxy_pass http://storage/$p;\r\n}\r\n\r\n--------8<--------8<--------8<--------8<--------\r\n\r\nFile path: /home/buglloc/work/projects/gixy/tests/plugins/simply/http_splitting/proxy_from_location_var_var_fp.conf\r\nNo issues found.\r\n\r\n--------8<--------8<--------8<--------8<--------\r\n\r\nFile path: /home/buglloc/work/projects/gixy/tests/plugins/simply/http_splitting/proxy_from_location_var_var_var.conf\r\n\r\n>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.\r\n   Description: Using variables that can contain \"\\n\" may lead to http injection.\r\n   Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md\r\n   Reason: At least variable \"$upstream\" can contain \"\\n\"\r\n   Pseudo config:\r\n\r\nlocation ~ /proxy/(a|b)/(?<p>\\W*)$ {\r\n\tset $upstream http://$1/$p?;\r\n\tproxy_pass $upstream;\r\n}\r\n\r\n==================== Summary ===================\r\nTotal issues:\r\n    Unspecified: 0\r\n    Low: 0\r\n    Medium: 0\r\n    High: 3\r\n\r\n```"}}
{"actor":{"display_login":"buglloc"}}