<!--
	For other Yahoo coverage, see Yahoo.xml.


	Mismatch:
		- parkorbird.flickr.com

	Timeout:
		- blog.flickr.com (blog.flickr.net)


	Insecure cookies are set for these domains and hosts:

		- .flickr.com
		- www.flickr.com

	Note: current_identity (.flickr.com) is read
	via script and so cannot be secured.

		https://github.com/EFForg/https-everywhere/issues/239

-->
<ruleset name="Flickr.com">

	<target host="flickr.com" />
	<target host="www.flickr.com" />
	<target host="api.flickr.com" />
	<target host="blog.flickr.com" />
	<target host="code.flickr.com" />
	<target host="m.flickr.com" />
	<target host="secure.flickr.com" />
	<target host="static.flickr.com" />
	<target host="*.static.flickr.com" />

	<test url="http://farm1.static.flickr.com/" />
	<test url="http://farm2.static.flickr.com/" />
	<test url="http://farm3.static.flickr.com/" />
	<test url="http://farm4.static.flickr.com/" />
	<test url="http://farm5.static.flickr.com/" />
	<test url="http://farm6.static.flickr.com/" />
	<test url="http://farm7.static.flickr.com/" />
	<test url="http://farm8.static.flickr.com/" />
	<test url="http://farm9.static.flickr.com/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.flickr\.com$" name="^(BX|admsort|cookie_session|current_identity|density|ffs|fldetectedlang|flrb|flrbcr|flrbgdrp|flrbgmrp|flrbgrp|flrbp|flrbs|fltoto|just_registered|localization|memsort|modsort|photoPHS|photoPWS|vp|xb)$" /-->
	<!--securecookie host="^www\.flickr\.com$" name="^(liqph|liqpw|ywandp)" /-->

	<!-- https://github.com/EFForg/https-everywhere/issues/728
	<securecookie host=".*\.flickr\.com$" name="^(?!current_identity$).+" />-->


	<rule from="^http://blog\.flickr\.com/"
		to="https://blog.flickr.net/" />
	<rule from="^http:"
		to="https:" />

</ruleset>
