[docker.io] Split false MCB coverage

MB · MB · commit d83e97845570 · 2014-02-06T05:05:14.000Z
diff --git a/src/chrome/content/rules/Docker.io-falsemixed.xml b/src/chrome/content/rules/Docker.io-falsemixed.xml
@@ -0,0 +1,13 @@
+<!--
+	For rules not causing false/broken MCB, see Docker.io.xml.
+
+-->
+<ruleset name="docker.io (false MCB)" platform="mixedcontent">
+
+	<target host="blog.docker.io" />
+
+
+	<rule from="^http://blog\.docker\.io/"
+		to="https://blog.docker.io/" />
+
+</ruleset>
diff --git a/src/chrome/content/rules/Docker.io.xml b/src/chrome/content/rules/Docker.io.xml
@@ -1,4 +1,7 @@
 <!--
+	For rules causing false/broken MCB, see Docker.io-falsemixed.xml.
+
+
 	Problematic subdomains:
 
 		- ^	(dropped)
@@ -7,15 +10,40 @@
 	Fully covered subdomains:
 
 		- (www.)	(^ → www)
-		- blog
 		- docs
 		- index
 
+
+	Partially covered subdomains:
+
+		- blog *
+
+	* Avoiding false/broken MCB, rest handled in Docker.io-falsemixed.xml.
+
+
+	Mixed content:
+
+		- css, on blog from:
+
+			- $self *
+			- fonts.googleapis.com *
+
+		- Images, on blog from:
+
+			- $self *
+			- www *
+
+	* Secured by us
+
 -->
-<ruleset name="docker.io">
+<ruleset name="docker.io (partial)">
 
 	<target host="docker.io" />
 	<target host="*.docker.io" />
+		<!--
+			Avoid false/broken MCB:
+						-->
+		<exclusion pattern="^http://blog\.docker\.io/+(?!\?mcsf_action=|assets/|favicon\.ico|plugins/|wp-content/|wp-includes/)" />
 
 
 	<securecookie host="^www\.docker\.io$" name=".+" />
