|
1 | 1 | <!-- |
| 2 | + For rules causing false/broken MCB, see Aftenposten.no-falsemixed.xml. |
| 3 | +
|
| 4 | +
|
2 | 5 | Nonfunctional subdomains: |
3 | 6 |
|
4 | | - - bedrift * |
| 7 | + - bedrift ¹ |
5 | 8 | - papp2 * |
6 | 9 | - sport (times out) |
7 | 10 |
|
| 11 | + ¹ Dropped |
8 | 12 | * Revoked |
9 | 13 |
|
10 | 14 |
|
|
16 | 20 | - bil * |
17 | 21 | - godetilbud * |
18 | 22 | - kundeservice (revoked) |
| 23 | + - leserpanel ⁵ |
19 | 24 | - ocacache * |
20 | 25 | - reise * |
21 | 26 | - rubrikkcache * |
22 | 27 |
|
| 28 | + - ap.mnocdn.no * |
| 29 | +
|
23 | 30 | ¹ Mixed css |
24 | 31 | * Works; mismatched, CN: www.aftenposten.no |
| 32 | + ⁵ Mismatched, CN: hotellweb1.schibsted-it.no |
25 | 33 |
|
26 | 34 |
|
27 | 35 | Partially covered subdomains: |
|
30 | 38 | - kundeservice (→ a) |
31 | 39 |
|
32 | 40 |
|
| 41 | + Fully covered subdomains: |
| 42 | +
|
| 43 | + - a |
| 44 | + - kundesenter |
| 45 | + - kundeweb |
| 46 | + - onlinesos |
| 47 | +
|
| 48 | +
|
33 | 49 | Insecure cookies are set for these domains: |
34 | 50 |
|
| 51 | + - kundesenter.aftenposten.no |
35 | 52 | - www.aftenposten.no |
36 | 53 |
|
37 | 54 |
|
38 | 55 | Mixed content: |
39 | 56 |
|
| 57 | + - css on www from $self * |
| 58 | +
|
40 | 59 | - Images, on: |
41 | 60 |
|
| 61 | + - leserpanel from $self |
| 62 | + - www from $self * |
42 | 63 | - www from www.bt.no * |
| 64 | + - www from ap.mnocdn.no * |
| 65 | +
|
| 66 | + - favicon on www from $self * |
| 67 | +
|
| 68 | + - Bugs on www from ocacache.medianorge.no |
43 | 69 |
|
44 | 70 | * Secured by us |
45 | 71 |
|
|
51 | 77 | Redirects to http: |
52 | 78 | --> |
53 | 79 | <!--exclusion pattern="^http://www\.aftenposten\.no/$" /--> |
| 80 | + <!-- |
| 81 | + Exceptions: |
| 82 | + --> |
| 83 | + <!--exclusion pattern="^http://www\.aftenposten\.no/(?!nyheter($|[?/]))" /--> |
54 | 84 | <!-- |
55 | 85 | Avoid broken MCB: |
56 | 86 | --> |
|
60 | 90 |
|
61 | 91 | <!-- Not secured by server: |
62 | 92 | --> |
| 93 | + <!--securecookie host="^kundesenter\.aftenposten\.no$" name="^_wp_session$" /--> |
63 | 94 | <!--securecookie host="^www\.aftenposten\.no$" name="^(VPW_Quota_\d+|VPW_QuotaInfo_\d+)$" /--> |
64 | 95 |
|
65 | 96 | <!--securecookie host="^\.aftenposten\.no$" name="^environment$" /--> |
66 | | - <securecookie host="^(?:a|kundeweb|onlinesos)\.aftenposten\.no$" name=".+" /> |
| 97 | + <securecookie host="^(?:a|kundesenter|kundeweb|onlinesos)\.aftenposten\.no$" name=".+" /> |
67 | 98 |
|
68 | 99 |
|
69 | 100 | <rule from="^http://(?:www\.)?aftenposten\.no/" to="https://www.aftenposten.no/"/> |
70 | 101 |
|
71 | | - <rule from="^http://(a|kundeweb|onlinesos)\.aftenposten\.no/" |
| 102 | + <rule from="^http://(a|kundesenter|kundeweb|onlinesos)\.aftenposten\.no/" |
72 | 103 | to="https://$1.aftenposten.no/" /> |
73 | 104 |
|
74 | 105 | <rule from="^http://kundeservice\.aftenposten\.no/(\?.*)?$" |
|
0 commit comments