forked from EFForg/https-everywhere
-
Notifications
You must be signed in to change notification settings - Fork 4
/
ACM.org.xml
123 lines (82 loc) · 2.45 KB
/
ACM.org.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
<!--
For rules causing false/broken MCB, see ACM.org-falsemixed.xml.
CDN buckets:
- delivery.acm.org.edgesuite.net
- deliveryimages.acm.org.edgesuite.net
- a1907.g.akamai.net
- portalparts.acm.org.edgesuite.net
- a1896.g.akamai.net
acm.org lacks proper ssl for the following subdomains
- amturing ¹
- awards ²
- delivery ³
- dev <- shows www
- jobs <- sends to jobtarget.com
- librarians <- displays what appears to be
an old version of the website.
- mags
² Shows awards, valid cert
² Redirects to http, valid cert
³ 504, akamai
Problematic subdomains:
- deliveryimages *
- jobs ²
- portalparts *
- store ³
* Works, akamai
² Partially works; mismatched, CN: *.jobtarget.com
³ Shows an old version of the website
Partially covered subdomains:
- (www.) ¹
- cacm (some pages redirect to http)
¹ Avoiding mixed stylesheets
Fully covered subdomains:
- cacm
- campus
- deliveryimages *
- dl
- learning
- myacm
- pd
- plone
- portal
- portalparts *
- queue
- spam
- store (→ campus)
- techpack
* → akamai
Mixed content:
- Scripts, on:
- www from www *
- css, on:
- util from myacm *
- www from www *
- Images:
- campus from portalparts *
- dl from $self *
- queue from deliveryimages *
- util from $self
- util from www *
- favicons on myacm and util from www *
* Secured by us
-->
<ruleset name="ACM.org (partial)">
<target host="acm.org" />
<target host="*.acm.org" />
<!--
Avoid false/broken MCB:
-->
<exclusion pattern="^http://(?:www\.)?acm\.org/+(?!.+\.(?:/image_thumb$|\.gif$|\.jpg$|\.png$)|favicon\.ico|images-mail/|portal_css/)" />
<exclusion pattern="^http://cacm.acm.org/(?!(?:accounts/(?:forgot-password|new)|login)/*(?:\?.*)?$|favicon\.ico|images/|javascripts/|stylesheets/|system/)" />
<!-- Not secured by server:
-->
<!--securecookie host="^(www\.)?acm\.org$" name="^I18N_LANGUAGE$" /-->
<!--securecookie host="^\.acm\.org$" name="^MYACM$" /-->
<!--securecookie host="^cacm\.acm\.org$" name="^_cacm_session$" /-->
<!--securecookie host="^(dl|learning|myacm|techpack)\.acm\.org$" name="^(CFID|CFTOKEN)$" /-->
<!--securecookie host="^jobs\.acm\.org$" name="^JTSUBREF$" /-->
<securecookie host="^(?!cacm\.).*\.acm\.org$" name=".+" />
<rule from="^http://((?:cacm|campus|dl|myacm|pd|learning|myacm|plone|portal|queue|spam|techpack|www)\.)?acm\.org/"
to="https://$1acm.org/" />
</ruleset>