update buildroot to 2017.02.11
This commit is contained in:
29
bsp/buildroot-2017.02.11/package/nginx-naxsi/Config.in
Normal file
29
bsp/buildroot-2017.02.11/package/nginx-naxsi/Config.in
Normal file
@@ -0,0 +1,29 @@
|
||||
config BR2_PACKAGE_NGINX_NAXSI
|
||||
bool "nginx-naxsi"
|
||||
depends on BR2_PACKAGE_NGINX_HTTP
|
||||
# uses pcre, so nginx needs to be built with pcre support
|
||||
select BR2_PACKAGE_PCRE
|
||||
help
|
||||
NAXSI means Nginx Anti XSS & SQL Injection.
|
||||
|
||||
Technically, it is a third party nginx module, available as
|
||||
a package for many UNIX-like platforms. This module, by
|
||||
default, reads a small subset of simple (and readable) rules
|
||||
containing 99% of known patterns involved in website
|
||||
vulnerabilities. For example, <, | or drop are not supposed
|
||||
to be part of a URI.
|
||||
|
||||
Being very simple, those patterns may match legitimate
|
||||
queries, it is the Naxsi's administrator duty to add
|
||||
specific rules that will whitelist legitimate
|
||||
behaviours. The administrator can either add whitelists
|
||||
manually by analyzing nginx's error log, or (recommended)
|
||||
start the project with an intensive auto-learning phase that
|
||||
will automatically generate whitelisting rules regarding a
|
||||
website's behaviour.
|
||||
|
||||
In short, Naxsi behaves like a DROP-by-default firewall, the
|
||||
only task is to add required ACCEPT rules for the target
|
||||
website to work properly.
|
||||
|
||||
https://github.com/nbs-system/naxsi
|
||||
@@ -0,0 +1,2 @@
|
||||
# Locally calculated
|
||||
sha256 256378564e36b8f222adb8fbe746529e73413c6cbe2b0e5574f41dfd62d92577 nginx-naxsi-0.55.2.tar.gz
|
||||
12
bsp/buildroot-2017.02.11/package/nginx-naxsi/nginx-naxsi.mk
Normal file
12
bsp/buildroot-2017.02.11/package/nginx-naxsi/nginx-naxsi.mk
Normal file
@@ -0,0 +1,12 @@
|
||||
################################################################################
|
||||
#
|
||||
# nginx-naxsi
|
||||
#
|
||||
################################################################################
|
||||
|
||||
NGINX_NAXSI_VERSION = 0.55.2
|
||||
NGINX_NAXSI_SITE = $(call github,nbs-system,naxsi,$(NGINX_NAXSI_VERSION))
|
||||
NGINX_NAXSI_LICENSE = GPLv2+ with OpenSSL exception
|
||||
NGINX_NAXSI_LICENSE_FILES = naxsi_src/naxsi_json.c
|
||||
|
||||
$(eval $(generic-package))
|
||||
Reference in New Issue
Block a user