[OAG] Split false MCB coverage

#529

Conflicts:
	src/chrome/content/rules/OAG.xml

src/chrome/content/rules/OAG.com-falsemixed.xml

@@ -0,0 +1,14 @@
+<!--
+	For rules not causing false/broken MCB, see OAG.xml.
+
+-->
+<ruleset name="OAG.com (false MCB)" platform="mixedcontent">
+
+	<target host="oag.com" />
+	<target host="www.oag.com" />
+
+
+	<rule from="^http://(www\.)?oag\.com/"
+		to="https://$1oag.com/" />
+
+</ruleset>

src/chrome/content/rules/OAG.xml

@@ -1,4 +1,7 @@
 <!--
+	For rules causing false/broken MCB, see OAG.com-falsemixed.xml.
+
+
 	Other UBM rulesets:
 
 		- CMP.xml
@@ -8,11 +11,35 @@
 		- RISI.xml
 		- TechWeb.xml
 		- UBM-mismatches.xml
+
+
+	These altnames don't exist:
+
+		- www.tppro.oag.com
+
+
+	Mixed content:
+
+		- Script on (www.) from ajax.googleapis.com ¹
+
+		- css on (www.) from $self ¹
+
+		- Images on (www.) and tppro from $self ¹
+
+		- Bug on (www.) from angorch-cdr7.com ²
+
+	¹ Secured by us
+	² Unsecurable <= reset
+
 -->
-<ruleset name="OAG">
+<ruleset name="OAG (partial)">
 
 	<target host="oag.com"/>
 	<target host="*.oag.com"/>
+		<!--
+			Avoid false/broken MCB:
+						-->
+		<exclusion pattern="^http://(?:www\.)?oag\.com/+(?!favicon\.ico|misc/|modules/|sites/)" />
 
 
 	<securecookie host="^tppro\.oag\.com$" name=".*"/>