|
1 | 1 | <ruleset name="Cloudfront"> |
2 | | - <target host="www.cloudfront.net" /> |
| 2 | + <target host="cloudfront.net" /> |
3 | 3 | <target host="*.cloudfront.net" /> |
4 | 4 |
|
5 | 5 | <rule from="^http://([^/:@\.]+)\.cloudfront\.net/" to="https://$1.cloudfront.net/"/> |
6 | | - <!-- Deal with https://trac.torproject.org/projects/tor/ticket/6848 --> |
7 | | - <exclusion pattern="^http://d1b14unh5d6w7g\.cloudfront\.net" /> |
8 | | - <!-- https://trac.torproject.org/projects/tor/ticket/7020 --> |
9 | | - <exclusion pattern="^http://d1i6vahw24eb07\.cloudfront\.net" /> |
10 | | - <!-- C-SPAN videos: https://trac.torproject.org/projects/tor/ticket/7567 --> |
11 | | - <exclusion pattern="^http://d1k4es7bw1lvxt\.cloudfront\.net" /> |
12 | | - <!-- this unbreaks turntable.fm and probably many other things--> |
13 | | - <exclusion pattern="^http://d1bw0qpdrmjlhz\.cloudfront\.net" /> |
14 | | - <!-- |
15 | | - This breaks padlet.com wall: |
16 | 6 |
|
17 | | - https://trac.torproject.org/projects/tor/ticket/9146 |
| 7 | + <!-- |
| 8 | + and this is a generalised precaution from turntable.fm |
18 | 9 | --> |
19 | | - <exclusion pattern="^http://d2s8n7nv9yizdf\.cloudfront\.net/assets/extras-\w{32}\.js" /> |
20 | | - <!-- and this is a generalised precaution from turntable.fm --> |
21 | | - <exclusion pattern="^http://([^/:@\.]+)\.cloudfront\.net/crossdomain\.xml" /> |
22 | | - <!-- Spotify https://trac.torproject.org/projects/tor/ticket/7888 --> |
23 | | - <exclusion pattern="^http://dsu0uct5x2puz\.cloudfront\.net" /> |
24 | | - <!-- Droplr: https://trac.torproject.org/projects/tor/ticket/8572 --> |
25 | | - <exclusion pattern="^http://d1zjcuqflbd5k\.cloudfront\.net" /> |
26 | | - <!-- TuneIn: https://trac.torproject.org/projects/tor/ticket/8704 --> |
27 | | - <exclusion pattern="^http://d3bwsr3zpy54hy\.cloudfront\.net" /> |
28 | | - <!-- Amazon mp3: https://trac.torproject.org/projects/tor/ticket/9367 |
29 | | - https://trac.torproject.org/projects/tor/ticket/9851 --> |
30 | | - <exclusion pattern="^http://d2q1srilgjznst\.cloudfront\.net" /> |
31 | | - <exclusion pattern="^http://d28julafmv4ekl\.cloudfront\.net" /> |
| 10 | + <exclusion pattern="^http://(?:[^/:@\.]+)\.cloudfront\.net/crossdomain\.xml" /> |
32 | 11 |
|
33 | | - <!-- Panelsyndicate: https://github.com/EFForg/https-everywhere/issues/650 --> |
34 | | - <exclusion pattern="^http://d2h7a0a3c1074f\.cloudfront\.net" /> |
| 12 | + <!-- See https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-creating-signed-url-custom-policy.html |
| 13 | + Policies contain the protocol, so a signature for http will not work for https |
| 14 | + --> |
| 15 | + <exclusion pattern="&Signature=" /> |
35 | 16 | </ruleset> |
0 commit comments