<!--
	For problematic rules, see OpenVZ.org-falsemixed.xml.


		- openvz.livejournal.com

			- blog


	Nonfunctional subdomains:

		- blog		(redirects to www.livejournal.com; mismatched, CN: *.livejournal.com)
		- download *
		- git *

	* Refused


	Problematic hosts in *openvz.org:

		- forum ¹

	¹ Server sends no certificate chain, see https://whatsmychaincert.com


	Partially covered subdomains:

		- static *

	* Some paths show www


	Insecure cookies are set for these domains and hosts: ᶜ

		- bugzilla.openvz.org
		- .forums.openvz.org

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="OpenVZ.org (partial)">

	<!--	Direct rewrites:
				-->
	<target host="openvz.org" />
	<target host="bugzilla.openvz.org" />
	<!--target host="forum.openvz.org" /-->
	<target host="src.openvz.org" />
	<target host="static.openvz.org" />
	<target host="wiki.openvz.org" />
	<target host="www.openvz.org" />

		<!--	Shows www:
					-->
		<exclusion pattern="^http://static\.openvz\.org/+(?:$|\?|supported_by_parallels_88x31\.gif)" />

			<test url="http://static.openvz.org/?" />
			<test url="http://static.openvz.org//?" />
			<test url="http://static.openvz.org/supported_by_parallels_88x31.gif" />
			<test url="http://static.openvz.org//supported_by_parallels_88x31.gif" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^bugzilla\.openvz\.org$" name="^DEFAULTFORMAT$" /-->
	<!--securecookie host="^\.forum\.openvz\.org$" name="^fud_session_\d{10}$" /-->

	<securecookie host="^\w" name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
