
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://careers.naukri.com/wp-content/themes/t1/css/dropCV.css => https://careers.naukri.com/wp-content/themes/t1/css/dropCV.css: (60, 'SSL certificate problem: self signed certificate')

	For rules causing false/broken MCB, see naukri.com-falsemixed.xml.


	Nonfunctional hosts in *naukri.com:

		- blogs ʳ
		- engineering ʳ
		- www.mideast ᵃ
		- recruiterzone ʳ

	ᵃ Shows another domain
	ʳ Refused


	Problematic hosts in *naukri.com:

		- ^ ᵈ
		- careers ᵐ ˢ
		- static ˣ
		- w5 ᵐ ˢ

	ᵈ Dropped, preemptable redirect
	ᵐ Mismatched
	ˢ Self-signed
	ˣ Mixed css, see https://www.paulirish.com/2010/the-protocol-relative-url/


	Insecure cookies are set for these domains and hosts: ᶜ

		- .naukri.com
		- careernavigator.naukri.com
		- demoresdex.naukri.com
		- freesearch.naukri.com
		- login.recruit.naukri.com
		- naukrirecruiter.naukri.com
		- www.naukri.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- css on static from static.naukimg.com

		- Images, on:

			- careers from companies.naukri.com ˢ
			- static from img.naukimg.com
			- static from static.naukimg.com

		- Bugs, on:

			- login.recruit from d1.zedo.com
			- www from b.scorecardresearch.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Naukri.com (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="apply.naukri.com" />
	<target host="careernavigator.naukri.com" />
	<target host="companies.naukri.com" />
	<target host="company.naukri.com" />
	<target host="demoresdex.naukri.com" />
	<target host="e-learning.naukri.com" />
	<target host="freesearch.naukri.com" />
	<target host="jobsearch.naukri.com" />
	<target host="learning.naukri.com" />
	<target host="lg.naukri.com" />
	<target host="login.naukri.com" />
	<target host="naukrirecruiter.naukri.com" />
	<target host="recruit.naukri.com" />
	<target host="login.recruit.naukri.com" />
	<target host="resume.naukri.com" />
	<!--target host="static.naukri.com" /-->
	<target host="w28.naukri.com" />
	<target host="www.naukri.com" />

		<test url="http://careers.naukri.com/wp-content/themes/t1/css/dropCV.css" />

		<!--	$ 403s, so:
					-->
		<test url="http://company.naukri.com/banners2016/kpit-ns-65x45-292016.gif" />

		<!--	$ 404s, so:
					-->
		<test url="http://lg.naukri.com/nLogger/boomLogger.php" />
		<test url="http://w28.naukri.com/advertiser/bms_logimpressions.php?banlist=1,1,1,1,1" />

		<!--	Mixed css:
					-->
		<!--test url="http://static.naukri.com/fraud/Jobseeker-Alert.html" /-->

	<!--	Complications:
				-->
	<target host="naukri.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.naukri\.com$" name="^(?:_did|_ff_[du]?s|_ff_r|_ncenv\[(?:env|lang)\]|_odur|_t_[du]?s|_t_r|FFSESS|FREEUNID|test)$" /-->
	<!--securecookie host="^(?:careernavigator|demoresdex|freesearch|naukrirecruiter)\.naukri\.com$" name="^symfony$" /-->
	<!--securecookie host="^login\.recruit\.naukri\.com$" name="^test$" /-->
	<!--securecookie host="^www\.naukri\.com$" name="^PHPSESSID$" /-->

	<securecookie host="^\." name="^_ga" />
	<securecookie host="^\w" name=".+" />


	<rule from="^http://naukri\.com/"
		to="https://www.naukri.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
