Bump version to 0.2.6 and enhance proxy_pass_normalized plugin to handle variable proxy_pass destinations

Author: dvershinin

gixy/__init__.py

@@ -2,4 +2,4 @@
 
 from gixy.core import severity
 
-version = "0.2.5"
+version = "0.2.6"

gixy/plugins/proxy_pass_normalized.py

@@ -32,6 +32,10 @@ def audit(self, directive):
         if not proxy_pass_args:
             return
 
+        if proxy_pass_args[0].startswith("$"):
+            # If proxy pass destination is defined by a variable, it is not possible to check for path normalization issues
+            return
+
         parsed = urlparse(proxy_pass_args[0])
 
         if not parsed:

tests/plugins/simply/proxy_pass_normalized/proxy_pass_var_fp.conf

@@ -0,0 +1,4 @@
+# False positive because we can't reliably check whether variable has path or not
+location @__auth__event_proxying {
+    proxy_pass $sm_auth_event_url;
+}