Config.in 1.2 KB

1234567891011121314151617181920212223242526272829
  1. config BR2_PACKAGE_NGINX_NAXSI
  2. bool "nginx-naxsi"
  3. depends on BR2_PACKAGE_NGINX_HTTP
  4. # uses pcre, so nginx needs to be built with pcre support
  5. select BR2_PACKAGE_PCRE
  6. help
  7. NAXSI means Nginx Anti XSS & SQL Injection.
  8. Technically, it is a third party nginx module, available as
  9. a package for many UNIX-like platforms. This module, by
  10. default, reads a small subset of simple (and readable) rules
  11. containing 99% of known patterns involved in website
  12. vulnerabilities. For example, <, | or drop are not supposed
  13. to be part of a URI.
  14. Being very simple, those patterns may match legitimate
  15. queries, it is the Naxsi's administrator duty to add
  16. specific rules that will whitelist legitimate
  17. behaviours. The administrator can either add whitelists
  18. manually by analyzing nginx's error log, or (recommended)
  19. start the project with an intensive auto-learning phase that
  20. will automatically generate whitelisting rules regarding a
  21. website's behaviour.
  22. In short, Naxsi behaves like a DROP-by-default firewall, the
  23. only task is to add required ACCEPT rules for the target
  24. website to work properly.
  25. https://github.com/nbs-system/naxsi