
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://beta.act-on.com/ => https://beta.act-on.com/: (28, 'Connection timed out after 20001 milliseconds')
Fetch error: http://gamma.act-on.com/ => https://gamma.act-on.com/: (51, "SSL: no alternative certificate subject name matches target host name 'gamma.act-on.com'")

	For rules causing MCB, see act-on.com-mixedcontent.xml.

	Other Act-On Software rulesets:

		- Act-On-Software.xml


	Nonfunctional hosts in *act-on.com:

		- press ²
		- video ʳ

	² 200 "requested URL was rejected"
	ʳ Refused


	Problematic hosts in *act-on.com:

		- au ᶜ
		- de ᶜ
		- es ᶜ
		- interactive ᵐ
		- mktg ˣ
		- nl ᶜ
		- uk ᵐ

	ᶜ See https://owasp.org/index.php/SecureFlag
	ᵐ Mismatched
	ˣ Mixed css, see https://www.paulirish.com/2010/the-protocol-relative-url/


	Insecure cookies are set for these domains: ᶜ

		- .act-on.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- css, on:

			- mktg from mktg.actonsoftware.com ˢ
			- mktg from anv.mik.ua ⁴

		- Images on mktg from mktg.actonsoftware.com ˢ

	⁴ Unsecurable <= 404
	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Act-On.com (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="act-on.com" />
	<!--target host="au.act-on.com" /-->
	<target host="beta.act-on.com" />
	<target host="blog.act-on.com" />
	<!--target host="de.act-on.com" /-->
	<target host="developer.act-on.com" />
	<!--target host="es.act-on.com" /-->
	<target host="gamma.act-on.com" />
	<!--target host="mktg.act-on.com" /-->
	<!--target host="nl.act-on.com" /-->
	<target host="success.act-on.com" />
	<target host="www.act-on.com" />

		<!--	Sets cookie without Secure:
							-->
		<!--test url="http://mktg.act-on.com/acton/fs/blocks/showLandingPage/a/248/p/p-0817/t/page/fm/0?namesource=menu_featured_item&amp;channel=Website&amp;ao_campid=1" /-->

	<!--	Complications:
				-->
	<target host="interactive.act-on.com" />
	<target host="uk.act-on.com" />

		<exclusion pattern="^http://interactive\.act-on\.com/(?!/*(?:$|\?))" />

			<!--	+ve:
					-->
			<test url="http://interactive.act-on.com/Director.aspx" />
			<test url="http://interactive.act-on.com/Global/UxPlugins/sticky_container/ixp-sticky_container.min.css" />
			<test url="http://interactive.act-on.com/KeyGrip.ashx" />
			<test url="http://interactive.act-on.com/Templates/ixp-microthemes.min.css" />
			<test url="http://interactive.act-on.com/assessment/inbound-vs-outbound" />
			<test url="http://interactive.act-on.com/press/rethink-marketing-automation" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.act-on\.com$" name="^wp248$" /-->

	<securecookie host="^\." name="^(?:_gat?$|_gat_|optimizely)" />
	<securecookie host="^(?!interactive\.)\w" name=".+" />


	<!--	Redirect drops args and forward slash:
							-->
	<rule from="^http://interactive\.act-on\.com/.*"
		to="https://www.act-on.com/" />

		<test url="http://interactive.act-on.com/?" />

	<!--	Redirect keeps all:
					-->
	<rule from="^http://uk\.act-on\.com/"
		to="https://www.act-on.co.uk/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
