
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://flow.typo3.org/_Resources/Static/Packages/TYPO3.FlowTypo3Org/Stylesheets/print.css => https://flow.typo3.org/_Resources/Static/Packages/TYPO3.FlowTypo3Org/Stylesheets/print.css: (51, "SSL: no alternative certificate subject name matches target host name 'flow.typo3.org'")

	For rules causing false/broken MCB, see TYPO3.org-falsemixed.xml.

	Other TYPO3 rulesets:

		- T3Blog.com.xml


	Nonfunctional hosts in *typo3.org:

		- demo ¹
		- lists ²

	¹ Dropped
	² Refused


	Problematic hosts in *typo3.org:

		- flow ¹
		- neos ²

	¹ Mixed css from $self
	² Mismatched


	Insecure cookies are set for these domains and hosts:

		- .typo3.org
		- buzz.typo3.org
		- forge.typo3.org
		- .forum.typo3.org


	Mixed content:

		- css on flow from $self *
		- Images flow from $self *
		- favicon on buzz, flow from $self *
		- Bug on ^, buzz, forum, wiki from piwik.typo3.org *

	⁴ Secured by us

-->
<ruleset name="TYPO3.org (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="typo3.org"/>
	<target host="association.typo3.org" />
	<target host="buzz.typo3.org" />
	<target host="certification.typo3.org" />
	<target host="composer.typo3.org" />
	<target host="docs.typo3.org" />
	<target host="flow.typo3.org" />
	<target host="forge.typo3.org" />
	<target host="forum.typo3.org" />
	<target host="get.typo3.org" />
	<target host="git.typo3.org" />
	<target host="piwik.typo3.org" />
	<target host="review.typo3.org" />
	<target host="shop.typo3.org" />
	<target host="wiki.typo3.org" />
	<target host="www.typo3.org" />

	<!--	Complications:
				-->
	<target host="neos.typo3.org" />

		<exclusion pattern="^http://flow\.typo3\.org/+(?!_Resources/)" />

			<!--	+ve:
					-->
			<test url="http://flow.typo3.org/community" />
			<test url="http://flow.typo3.org/home" />
			<test url="http://flow.typo3.org/support" />

			<!--	-ve:
					-->
			<test url="http://flow.typo3.org/_Resources/Static/Packages/TYPO3.FlowTypo3Org/Stylesheets/print.css" />

		<!--	Formerly triggered broken MCB:
							-->
		<test url="http://docs.typo3.org/getthedocs/" />
		<test url="http://docs.typo3.org/typo3cms/" />
		<test url="http://docs.typo3.org/typo3cms/CoreApiReference/" />
		<test url="http://docs.typo3.org/typo3cms/Index.html" />
		<test url="http://docs.typo3.org/typo3cms/InstallationGuide/" />
		<test url="http://docs.typo3.org/typo3cms/SecurityGuide/" />
		<test url="http://docs.typo3.org/typo3cms/TyposcriptSyntaxReference/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.typo3\.org$" name="^fe_typo_user$" /-->
	<!--securecookie host="^buzz\.typo3\.org$" name="^fe_typo_user$" /-->
	<!--securecookie host="^forge\.typo3\.org$" name="^_redmine_session$" /-->
	<!--securecookie host="^\.forum\.typo3\.org$" name="^fud_session_\d+$" /-->

	<securecookie host="^\." name="^fe_typo_user$" />
	<securecookie host="^(?!flow\.)." name=".+" />


	<!--	Redirect keeps path and args,
		but not forward slash:
					-->
	<rule from="^http://neos\.typo3\.org/+"
		to="https://www.neos.io/" />

		<test url="http://neos.typo3.org//" />

	<rule from="^http:"
		to="https:" />
</ruleset>
