forked from EFForg/https-everywhere
-
Notifications
You must be signed in to change notification settings - Fork 4
/
ALA.org.xml
110 lines (79 loc) · 2.53 KB
/
ALA.org.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
<!--
American Library Association
Other American Library Association rulesets:
- chooseprivacyweek.org.xml
Nonfunctional hosts in *ala.org:
- ala14 *
- alaac15 *
* Shows another domain
Problematic hosts in *ala.org:
- alastore ¹
- login.connect ¹
- exhibitors ²
- idp ³
¹ Mismatched
² Expired
³ Server sends no certificate chain, see https://whatsmychaincert.com
Insecure cookies are set for these hosts:
- www.alastore.ala.org
- idp.ala.org
- joblist.ala.org
Mixed content:
- css on connect from fonts.googleapis.com *
- Images on www.alastore from $self *
* Secured by us
-->
<ruleset name="ALA.org (partial)">
<!-- Direct rewrites:
-->
<target host="ala.org" />
<target host="www.alastore.ala.org" />
<target host="connect.ala.org" />
<!--target host="login.connect.ala.org" /-->
<!--target host="exhibitors.ala.org" /-->
<!--target host="idp.ala.org" /-->
<target host="joblist.ala.org" />
<target host="www.ala.org" />
<!-- Complications:
-->
<target host="alastore.ala.org" />
<!-- Differs from http:
-->
<!--exclusion pattern="^http://ala\.org/$" /-->
<!--
Redirects to http:
-->
<!--exclusion pattern="^http://www\.ala\.org/$" /-->
<!--
404:
-->
<!--exclusion pattern="^http://(?:www\.)?ala\.org/(?:sites/|membership/renew$|user/login$)" /-->
<!--
Exceptions:
-->
<exclusion pattern="^http://(?:www\.)?ala\.org/+(?!Security/|Template\.cfm)" />
<!-- +ve:
-->
<test url="http://ala.org/aboutala/contactus/" />
<test url="http://www.ala.org/aboutala/donate" />
<test url="http://www.ala.org/membership/renew" />
<test url="http://www.ala.org/tools/" />
<test url="http://www.ala.org/user/login" />
<!-- -ve:
-->
<test url="http://ala.org/Template.cfm" />
<test url="http://ala.org/Security/Login.cfm" />
<test url="http://www.ala.org/Security/Shibboleth.sso/Login?target=" />
<test url="http://www.ala.org/Template.cfm" />
<!--test url="http://idp.ala.org/idp/profile/SAML2/Redirect/SSO?SAMLRequest=" /-->
<!-- Not secured by server:
-->
<!--securecookie host="^www\.alastore\.ala\.org$" name="^(?:ASP\.NET_SessionId|HttpReferer|Referer)$" /-->
<!--securecookie host="^idp\.ala\.org$" name="^_idp_authn_lc_key$" /-->
<!--securecookie host="^joblist\.ala\.org$" name="^(?:CFID|CFTOKEN)$" /-->
<securecookie host="^(?:www\.alastore|joblist)\.ala\.org$" name=".+" />
<rule from="^http://alastore\.ala\.org/"
to="https://www.alastore.ala.org/" />
<rule from="^http:"
to="https:" />
</ruleset>