nginx gixy plugin to test min folder depth of docroot

nonspecific_root.py

import gixy
from gixy.plugins.plugin import Plugin


class nonspecific_root(Plugin):
    """
    Insecure example:
        root /home/nginx
        
    Secure example:
        root /home/nginx/src/www
    """
    summary = 'The root path for locations may not be specific enough.'
    severity = gixy.severity.MEDIUM
    description = 'root path should be never be a high-level folder like /home or /home/someuser.'
    help_url = 'uber.com'
    directives = ['root']
    folder_depth = 4

    def audit(self, directive):
        path = directive.args[0]
        folders = [n for n in path.split('/') if n]

        if len(folders) < self.folder_depth:
            self.add_issue(directive=directive)