<!--
	For other Yahoo coverage, see Yahoo.xml.

	Different content HTTP/HTTPS:
		amt.flickr.com
		auto-up.flickr.com
		bup.flickr.com
		up.flickr.com

	Invalid certificate:
		rw.api.flickr.com
		hv-static.flickr.com
		\d.hv-static.flickr.com
		images.flickr.com (broken chain)
		photos\d.flickr.com
		search.flickr.com (broken chain)

	No working URL known:
		appletv.flickr.com
		heartbeat.flickr.com

	Time out:
		blog.flickr.com

	Insecure cookies are set for these domains and hosts: ᶜ

		- .flickr.com
		- www.flickr.com

	Note: current_identity (.flickr.com) is read
	via script and so cannot be secured.

		https://github.com/EFForg/https-everywhere/issues/239

	other cookies also seem to need excluding. securecookie
	requires work from someone with a Flickr account.

		https://github.com/EFForg/https-everywhere/issues/728

-->
<ruleset name="Flickr.com">

	<target host="flickr.com" />
	<target host="www.flickr.com" />
	<target host="api.flickr.com" />
		<test url="http://api.flickr.com/services/rest/" />
		<exclusion pattern="^http://api\.flickr\.com/$" />
			<test url="http://api.flickr.com/" /><!-- 404 -->
	<target host="blog.flickr.com" />
	<target host="code.flickr.com" />
	<target host="embedr.flickr.com" />
	<target host="m.flickr.com" />
	<target host="secure.flickr.com" />
	<target host="static.flickr.com" />
	<target host="*.static.flickr.com" />
		<test url="http://farm1.static.flickr.com/" />
		<test url="http://farm2.static.flickr.com/" />
		<test url="http://farm3.static.flickr.com/" />
		<test url="http://farm4.static.flickr.com/" />
		<test url="http://farm5.static.flickr.com/" />
		<test url="http://farm6.static.flickr.com/" />
		<test url="http://farm7.static.flickr.com/" />
		<test url="http://farm8.static.flickr.com/" />
		<test url="http://farm9.static.flickr.com/" />
	<target host="widgets.flickr.com" />




	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.flickr\.com$" name="^(BX|admsort|cookie_session|current_identity|density|ffs|fldetectedlang|flrb|flrbcr|flrbgdrp|flrbgmrp|flrbgrp|flrbp|flrbs|fltoto|just_registered|localization|memsort|modsort|photoPHS|photoPWS|vp|xb)$" /-->
	<!--securecookie host="^www\.flickr\.com$" name="^(liqph|liqpw|ywandp)" /-->

	<!-- https://github.com/EFForg/https-everywhere/issues/728
	<securecookie host=".*\.flickr\.com$" name="^(?!current_identity$).+" />-->


	<rule from="^http://blog\.flickr\.com/"
		to="https://blog.flickr.net/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
