|
1 | 1 | <!-- |
2 | 2 | xHamster uses *.xhcdn.com and cdn13.com |
3 | | - As far as I can tell all of it either only supports http or redirects from https to something else. |
| 3 | + As far as I can tell all of cdn13.com either only supports http or redirects from https to something else. |
4 | 4 |
|
5 | | - Nonfunctional subdomains on xhcdn.com |
6 | | - - ept * |
7 | | - - et13 * |
8 | | - - ut0[0-9] * |
9 | | - - ut1[0-9] * |
10 | 5 |
|
11 | 6 | Nonfunctional subdomains on cdn13.com |
12 | 7 | - a8-19.clients * |
|
22 | 17 |
|
23 | 18 | - et\d * |
24 | 19 | - et1\d * |
25 | | - - m ** |
26 | | - - mobile (shows www) |
27 | | - - p1 * |
28 | | - - partners * |
29 | | - - upload * |
30 | 20 |
|
31 | 21 | * Times out |
32 | | - ** Shows www; mismatched, CN: xhamster.com) |
33 | 22 |
|
34 | 23 |
|
35 | 24 | Problematic subdomains: |
36 | 25 |
|
| 26 | + - mobile ¹ |
37 | 27 | - suggestions (works, uservoice.com) |
38 | 28 |
|
| 29 | + ¹ Mismatched |
| 30 | +
|
39 | 31 |
|
40 | 32 | Fully covered subdomains: |
41 | 33 |
|
42 | 34 | - (www.) |
| 35 | + - de |
| 36 | + - es |
43 | 37 | - eu-st |
| 38 | + - fr |
| 39 | + - it |
| 40 | + - jp |
| 41 | +
|
| 42 | + - m |
| 43 | + - de.m |
| 44 | + - es.m |
| 45 | + - fr.m |
| 46 | + - it.m |
| 47 | + - jp.m |
| 48 | + - nl.m |
| 49 | + - pl.m |
| 50 | + - pt.m |
| 51 | + - ru.m |
| 52 | +
|
| 53 | + - mobile (→ m.xhamster.com) |
| 54 | + - nl |
| 55 | + - pl |
| 56 | + - partners |
| 57 | + - pt |
| 58 | + - ru |
44 | 59 | - us-st |
45 | 60 | - static |
| 61 | + - upload |
46 | 62 |
|
47 | 63 |
|
48 | | - Mixed content: |
| 64 | + Insecure cookies are set for these domains and hosts: |
| 65 | +
|
| 66 | + - .xhamster.com |
| 67 | +
|
| 68 | + - m.xhamster.com |
| 69 | + - .m.xhamster.com |
| 70 | + - de.m.xhamster.com |
| 71 | + - es.m.xhamster.com |
| 72 | + - fr.m.xhamster.com |
| 73 | + - it.m.xhamster.com |
| 74 | + - jp.m.xhamster.com |
| 75 | + - nl.m.xhamster.com |
| 76 | + - pl.m.xhamster.com |
| 77 | + - pt.m.xhamster.com |
| 78 | + - ru.m.xhamster.com |
| 79 | +
|
| 80 | + - partners.xhamster.com |
| 81 | +
|
49 | 82 |
|
50 | | - - Images, on www from: |
| 83 | + Mixed content: |
51 | 84 |
|
52 | | - - et\d * |
53 | | - - et1\d * |
54 | | - - eu-st ** |
55 | | - - us-st ** |
56 | | - - p1 * |
| 85 | + - Images on \w\w, www from ept.xhcdn.com * |
57 | 86 |
|
| 87 | + - Ads on \w\w from tools.bongacash.com *** |
| 88 | + - Ads on \w\w from medleyads.com |
| 89 | + - Bug on m, \w\w.m, www from a[24].mediagra.com * |
58 | 90 | - Web/ads bug on www from adscnt2 *** |
59 | 91 | - Web bug on www from cnt1 *** |
60 | 92 | - Web/ads bug on www from cnt2 *** |
61 | | - - Web bug on www from syndication.traffichaus.com *** |
| 93 | + - Web bug on www from syndication.traffichaus.com |
62 | 94 |
|
63 | 95 | * Unsecurable, doesn't trip MCB anyway |
64 | 96 | ** Secured by us, doesn't trip MCB anyway |
|
67 | 99 | --> |
68 | 100 | <ruleset name="xHamster.com"> |
69 | 101 |
|
| 102 | + <!-- Direct rewrites: |
| 103 | + --> |
70 | 104 | <target host="xhamster.com" /> |
| 105 | + <target host="de.xhamster.com" /> |
| 106 | + <target host="es.xhamster.com" /> |
| 107 | + <target host="fr.xhamster.com" /> |
| 108 | + <target host="it.xhamster.com" /> |
| 109 | + <target host="jp.xhamster.com" /> |
| 110 | + |
| 111 | + <target host="m.xhamster.com" /> |
| 112 | + <target host="de.m.xhamster.com" /> |
| 113 | + <target host="fr.m.xhamster.com" /> |
| 114 | + <target host="es.m.xhamster.com" /> |
| 115 | + <target host="it.m.xhamster.com" /> |
| 116 | + <target host="jp.m.xhamster.com" /> |
| 117 | + <target host="nl.m.xhamster.com" /> |
| 118 | + <target host="pl.m.xhamster.com" /> |
| 119 | + <target host="pt.m.xhamster.com" /> |
| 120 | + <target host="ru.m.xhamster.com" /> |
| 121 | + |
| 122 | + <target host="nl.xhamster.com" /> |
| 123 | + <target host="partners.xhamster.com" /> |
| 124 | + <target host="pl.xhamster.com" /> |
| 125 | + <target host="pt.xhamster.com" /> |
| 126 | + <target host="ru.xhamster.com" /> |
| 127 | + <target host="upload.xhamster.com" /> |
| 128 | + |
71 | 129 | <target host="www.xhamster.com" /> |
72 | 130 | <target host="us-st.xhamster.com" /> |
73 | 131 | <target host="eu-st.xhamster.com" /> |
74 | 132 | <target host="secure.xhamster.com" /> |
75 | 133 | <target host="static.xhamster.com" /> |
| 134 | + |
| 135 | + <!-- Complications: |
| 136 | + --> |
| 137 | + <target host="mobile.xhamster.com" /> |
76 | 138 | <target host="suggestions.xhamster.com" /> |
77 | 139 |
|
78 | 140 | <!-- without this videos break when using flash --> |
79 | 141 | <exclusion pattern="^http://static\.xhamster\.com/crossdomain\.xml" /> |
80 | 142 | <test url="http://static.xhamster.com/crossdomain.xml" /> |
81 | 143 | <test url="http://static.xhamster.com/crossdomain.xml?foo" /> |
82 | 144 |
|
| 145 | + |
83 | 146 | <!-- Not secured by server: |
84 | 147 | --> |
85 | | - <!--securecookie host="^\.xhamster\.com$" name="^(mdg:uid|prid|prs|stats|x_viewes|x_view_probe)$" /--> |
| 148 | + <!--securecookie host="^m?\.xhamster\.com$" name="^lang$" /--> |
| 149 | + <!--securecookie host="^\.xhamster\.com$" name="^(mdg:uid|mobileUse|prid|prs|stats|x_viewes|x_view_probe)$" /--> |
| 150 | + <!--securecookie host="^((de|es|fr|it|jp|nl|pl|pt|ru)\.)?m\.xhamster\.com$" name="^mobileRef$" /--> |
| 151 | + <!--securecookie host="^\.m\.xhamster\.com$" name="^simple$" /--> |
| 152 | + <!--securecookie host="^partners\.xhamster\.com$" name="^PHPSESSID$" /--> |
86 | 153 |
|
87 | 154 | <securecookie host="^\.xhamster\.com$" name="^(?:splash-\d+|stats|uvts)$" /> |
88 | 155 | <!-- |
89 | 156 | Can these be secured safely? |
90 | 157 | --> |
91 | | - <!--securecookie host="^\.xhamster\.com$" name="^(mdg:uid|mobileType|prid)$" /--> |
| 158 | + <!--securecookie host="^\.xhamster\.com$" name="^(mdg:uid|mobileType|mobileUse|prid|prs|x_viewes|x_view_probe)$" /--> |
| 159 | + <securecookie host="^(?:(?:\.|\w\w\.)?m|partners)\.xhamster\.com$" name=".+" /> |
| 160 | + |
| 161 | + |
| 162 | + <rule from="^http://mobile\.xhamster\.com/" |
| 163 | + to="https://m.xhamster.com/" /> |
92 | 164 |
|
93 | 165 | <rule from="^http://suggestions\.xhamster\.com/" |
94 | 166 | to="https://xhamster.uservoice.com/" /> |
|
0 commit comments