Amazon-Adsystem.com.xml

<!--
	For other Amazon coverage, see Amazon.xml.


	CDN buckets:

		- d1ykf07e75w7ss.cloudfront.net

			- c


	Problematic hosts in *amazon-adsystem.com:

		- ps-us *

	* Cloudfront


	Insecure cookies are set for these domains: ᶜ

		- .amazon-adsystem.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	ps-us.amazon-adsystem.com sets aps-trtmnt cookie
	on whichever domain it is loaded from.

-->
<ruleset name="Amazon-Adsystem.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="aax.amazon-adsystem.com" />
	<target host="aax-eu.amazon-adsystem.com" />
	<target host="aax-us-east.amazon-adsystem.com" />
	<target host="c.amazon-adsystem.com" />
	<target host="fls-na.amazon-adsystem.com" />
	<target host="ir-de.amazon-adsystem.com" />
	<target host="ir-na.amazon-adsystem.com" />
	<target host="rcm-na.amazon-adsystem.com" />
	<target host="s.amazon-adsystem.com" />
	<target host="wms-eu.amazon-adsystem.com" />
	<target host="wms-na.amazon-adsystem.com" />
	<target host="ws-ea.amazon-adsystem.com" />
	<target host="ws-na.amazon-adsystem.com" />

	<!--	Complications:
				-->
	<target host="ps-us.amazon-adsystem.com" />

		<!--	Sets cookie without Secure:
							-->
		<!--test url="http://aax-eu.amazon-adsystem.com/s/iu3?d=&amp;slot=&amp;a2=&amp;old_oo=&amp;cb=" /-->

		<test url="http://ir-de.amazon-adsystem.com/e/ir?t=&amp;l=&amp;o=" />
		<test url="http://wms-eu.amazon-adsystem.com/panda/20070822/DE/img/a-logo-amazon.png" />
		<test url="http://ws-eu.amazon-adsystem.com/widgets/q?ServiceVersion=&amp;OneJS=&amp;Operation=GetAdHtml&amp;MarketPlace=&amp;source=&amp;ref=&amp;ad_type=&amp;tracking_id=&amp;marketplace=amazon&amp;region=&amp;placement=&amp;asins&amp;linkId=&amp;show_border=&amp;link_opens_in_new_window=" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.amazon-adsystem\.com$" name="^ad-id$" /-->

	<securecookie host="." name="." />


	<rule from="^http://ps-us\.amazon-adsystem\.com/"
		to="https://dnd1av4y9k5gc.cloudfront.net/" />

	<rule from="^http:"
		to="https:" />

</ruleset>