|
13 | 13 |
|
14 | 14 | Problematic hosts in *strikingly.com: |
15 | 15 |
|
| 16 | + - assets ** |
16 | 17 | - support * |
| 18 | + - www ** |
17 | 19 |
|
18 | 20 | * Mismatched |
| 21 | + ** Breaks login and dashboard; see https://github.com/EFForg/https-everywhere/issues/6865 |
19 | 22 |
|
20 | 23 |
|
21 | 24 | Fully covered hosts in *strikingly.com: |
22 | 25 |
|
23 | | - - (www.)? |
24 | | - - assets |
| 26 | + - ^ |
25 | 27 | - b |
26 | 28 |
|
27 | 29 |
|
28 | | - Insecure cookies are set for these hosts: |
| 30 | + Insecure unsecurable cookies are set for these hosts: |
29 | 31 |
|
30 | 32 | - www.strikingly.com |
31 | 33 |
|
32 | 34 | --> |
33 | 35 | <ruleset name="Strikingly.com (partial)"> |
34 | 36 |
|
35 | | - <!-- Direct rewrites: |
36 | | - --> |
37 | 37 | <target host="strikingly.com" /> |
38 | 38 | <target host="assets.strikingly.com" /> |
39 | 39 | <target host="b.strikingly.com" /> |
40 | 40 | <target host="www.strikingly.com" /> |
41 | 41 |
|
| 42 | + <!-- The following exclusions serve to fix various issues regarding logging in |
| 43 | + to the site and having the dashboard properly displayed; see |
| 44 | + https://github.com/EFForg/https-everywhere/issues/6865 for further details: |
| 45 | + --> |
| 46 | + <exclusion pattern="http://assets\.strikingly\.com/assets/[\w\d/-]+\.js$" /> |
| 47 | + |
| 48 | + <test url="http://assets.strikingly.com/assets/application-362e8a18a2ddf1c67eaad35ce6fb569c.js" /> |
| 49 | + <test url="http://assets.strikingly.com/assets/v4/webpack_bridge-app-bundle-66d6f9a0908a285fd9fc64f5ee7d9565.js" /> |
| 50 | + |
| 51 | + <exclusion pattern="^http://www\.strikingly\.com/a/t/pages/listing\.html$" /> |
| 52 | + |
| 53 | + <test url="http://www.strikingly.com/a/t/pages/listing.html" /> |
| 54 | + |
| 55 | + <exclusion pattern="^http://www\.strikingly\.com/r/v1" /> |
| 56 | + |
| 57 | + <test url="http://www.strikingly.com/r/v1/sites" /> |
| 58 | + <test url="http://www.strikingly.com/r/v1/users/me/email_settings" /> |
| 59 | + |
| 60 | + <exclusion pattern="^http://www\.strikingly\.com/s" /> |
| 61 | + |
| 62 | + <test url="http://www.strikingly.com/s/login" /> |
| 63 | + |
42 | 64 |
|
43 | 65 | <!-- Not secured by server: |
44 | 66 | --> |
45 | 67 | <!--securecookie host="^www\.strikingly\.com$" name="^(_bobcat_session|XSRF-TOKEN|locale)$" /--> |
46 | | - |
47 | | - <securecookie host="^www\.strikingly\.com$" name=".+" /> |
| 68 | + <!--securecookie host="^www\.strikingly\.com$" name=".+" /--> |
48 | 69 |
|
49 | 70 |
|
50 | 71 | <rule from="^http:" |
|
0 commit comments