<!--
	NB: Tor users cannot view* this website due to CloudFlare settings.

	See:

		- https://blog.torproject.org/blog/call-arms-helping-internet-services-accept-anonymous-users
		- https://support.cloudflare.com/hc/en-us/articles/203306930-Does-CloudFlare-block-Tor-
		- https://support.cloudflare.com/hc/en-us/articles/200170206-How-do-I-turn-I-m-Under-Attack-mode-on-

	* without enabling javascript, for security and privacy implications see e.g.:

		- https://www.mozilla.org/security/known-vulnerabilities/firefox.html
		- https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~tbb-fingerprinting
		- https://panopticlick.eff.org


	Insecure cookies are set for these domains and hosts:

		- xxx24hr.com
		- .xxx24hr.com
		- www.xxx24hr.com


	Mixed content:

		- Images, from:

			- thumbnails\d{3}.imagebam.com ¹
			- s\d{1,2}.postimg.org ²
			- img-l3.xvideos.com ¹
			- img100-\d{3}.xvideos.com ³

		- Bug from sstatic1.histats.com ˢ

	¹ Unsecurable <= refused
	² Rule disabled by default <= mismatched
	³ Unsecurable <= 400
	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="xxx24hr.com">

	<target host="xxx24hr.com" />
	<target host="www.xxx24hr.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(www\.)?xxx24hr\.com$" name="^PHPSESSID$" /-->
	<!--securecookie host="^\.xxx24hr\.com$" name="^(__cfduid|cf_clearance)$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
