forked from EFForg/https-everywhere
-
Notifications
You must be signed in to change notification settings - Fork 4
/
2Checkout.xml
55 lines (29 loc) · 925 Bytes
/
2Checkout.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
<!--
For problematic rules, see 2Checkout-mismatches.xml.
Other 2Checkout rulesets:
- 2co.co.xml
Nonfunctional hosts in *2checkout.com:
- help ʰ
ʰ Salesforce / redirects to http
Problematic hosts in *2checkout.com:
- go ᵐ
ᵐ Mismatched
Insecure cookies are set for these domains: ᶜ
- .go.2checkout.com
ᶜ See https://owasp.org/index.php/SecureFlag
Mixed content:
- Images on go from img03.en25.com ˢ
- favicon on go from help.2checkout.com
ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/
-->
<ruleset name="2Checkout.com (partial)">
<target host="2checkout.com" />
<target host="sandbox.2checkout.com" />
<target host="www.2checkout.com" />
<!-- Not secured by server:
-->
<!--securecookie host="^\.go\.2checkout\.com$" name="^ELOQUA$" /-->
<securecookie host="." name="." />
<rule from="^http:"
to="https:" />
</ruleset>