proxy_pass_normalized: do not report on modifier equal to '='

Author: MegaManSec

gixy/plugins/proxy_pass_normalized.py

@@ -26,12 +26,15 @@ def __init__(self, config):
 
     def audit(self, directive):
         proxy_pass_args = directive.args
-
         rewrite_fail = False
+        parent = directive.parent
 
         if not proxy_pass_args:
             return
 
+        if not parent or parent.name != 'location' or parent.modifier == '=':
+            return
+
         if proxy_pass_args[0].startswith("$") and '/' not in proxy_pass_args[0]:
             # If proxy pass destination is defined by only a variable, it is not possible to check for path normalization issues
             return