|
1 | 1 | <!-- |
2 | | - Commit msg: https://trac.torproject.org/projects/tor/ticket/12800 |
3 | | -
|
| 2 | + For rules causing false/broken MCB, see Citrix.com-falsemixed.xml. |
4 | 3 |
|
5 | 4 | Other Citrix rulesets: |
6 | 5 |
|
|
10 | 9 | - GoToMeeting.com.xml |
11 | 10 | - GoToTraining.com.xml |
12 | 11 | - GoToWebinar.com.xml |
| 12 | + - Podio.com.xml |
13 | 13 | - ShareFile.com.xml |
14 | 14 | - ShareFile_support.com.xml |
15 | 15 |
|
16 | 16 |
|
17 | 17 | CDN buckets: |
18 | 18 |
|
| 19 | + - blogsprod.s3.amazonaws.com |
19 | 20 | - c558080.r80.cf2.rackcdn.com ← cdn.ws.citrix.com |
20 | 21 |
|
21 | 22 |
|
22 | 23 | Nonfunctional domains: |
23 | 24 |
|
24 | | - - open.citrix.com Refused |
25 | | - - (www.)joingotomeeting.com |
26 | | - - (www.)jointraining.com |
27 | | - - (www.)joinwebinar.com |
28 | | -
|
| 25 | + - open.citrix.com ¹ |
| 26 | + - (www.)?joingotomeeting.com ² |
| 27 | + - (www.)?jointraining.com ² |
| 28 | + - (www.)?joinwebinar.com ² |
29 | 29 |
|
30 | | - Problematic domains: |
| 30 | + ¹ Shows another domain |
| 31 | + ² Refused |
31 | 32 |
|
32 | | - - cdn.ws.citrix.com (akamai) |
33 | 33 |
|
| 34 | + Problematic hosts in *citrix.com: |
34 | 35 |
|
35 | | - Partially covered hosts in *citrix.com: |
| 36 | + - blogs ¹ |
| 37 | + - help ² |
| 38 | + - cdn.ws ³ |
| 39 | + - training ⁴ |
36 | 40 |
|
37 | | - - discussions * |
38 | | - - training * |
39 | | -
|
40 | | - * Avoiding broken MCB |
| 41 | + ¹ Redirects to webapps.citrite.net |
| 42 | + ² Mismatched |
| 43 | + ³ Akamai |
| 44 | + ⁴ Mixed css |
41 | 45 |
|
42 | 46 |
|
43 | 47 | Insecure cookies are set for these domains and hosts: |
|
49 | 53 |
|
50 | 54 | Mixed content: |
51 | 55 |
|
52 | | - - css, on: |
53 | | -
|
54 | | - - discussions from *.rackcdn.com |
55 | | - - training from $self |
| 56 | + - css on training from $self * |
56 | 57 |
|
57 | 58 | - Images, on: |
58 | 59 |
|
59 | | - - discussions from $self |
60 | | - - training from www.citrix.com |
| 60 | + - training from $self * |
| 61 | + - training from www.citrix.com * |
| 62 | +
|
| 63 | + * Secured by us |
61 | 64 |
|
62 | 65 | --> |
63 | 66 | <ruleset name="Citrix.com (partial)"> |
64 | 67 |
|
65 | 68 | <!-- Direct rewrites: |
66 | 69 | --> |
67 | 70 | <target host="citrix.com" /> |
68 | | - <target host="blogs.citrix.com" /> |
69 | 71 | <target host="citrixready.citrix.com" /> |
70 | 72 | <target host="community.citrix.com" /> |
71 | 73 | <target host="discussions.citrix.com" /> |
|
83 | 85 |
|
84 | 86 | <!-- Complications: |
85 | 87 | --> |
| 88 | + <target host="blogs.citrix.com" /> |
86 | 89 | <target host="cdn.ws.citrix.com" /> |
87 | 90 |
|
88 | 91 | <!-- Avoid broken MCB: |
89 | 92 | --> |
90 | | - <exclusion pattern="^http://discussions\.citrix\.com/+(?!public/)" /> |
91 | 93 | <exclusion pattern="^http://training\.citrix\.com/+(?!favicon\.ico|theme/)" /> |
92 | 94 |
|
93 | 95 | <!-- +ve: |
94 | 96 | --> |
95 | | - <test url="http://discussions.citrix.com/forum/363-storefront/" /> |
96 | | - <test url="http://discussions.citrix.com/topic/365473-gssexception/" /> |
97 | | - |
98 | 97 | <test url="http://training.citrix.com/cms/education/networking/" /> |
99 | 98 | <test url="http://training.citrix.com/cms/index.php/certification/" /> |
100 | 99 | <test url="http://training.citrix.com/mod/ctxcatalog/training.php?lang=ja" /> |
101 | 100 |
|
102 | 101 | <!-- -ve: |
103 | 102 | --> |
104 | | - |
105 | | - <test url="http://discussions.citrix.com/public/style_images/master/attachicon.gif" /> |
106 | | - |
107 | 103 | <test url="http://training.citrix.com/favicon.ico" /> |
108 | 104 | <test url="http://training.citrix.com/theme/ctxmain/pix/search_gradient.png" /> |
109 | 105 |
|
| 106 | + <test url="http://discussions.citrix.com/forum/363-storefront/" /> |
| 107 | + <test url="http://discussions.citrix.com/topic/365473-gssexception/" /> |
| 108 | + <test url="http://discussions.citrix.com/public/style_images/master/attachicon.gif" /> |
| 109 | + |
110 | 110 |
|
111 | 111 | <!-- Not secured by server: |
112 | 112 | --> |
113 | | - <!--securecookie host="^\.citrix\.com$" name="^(_wsad_MyCitrixHash|MyCitrixShadow|id_validate)$" /--> |
| 113 | + <!--securecookie host="^\.citrix\.com$" name="^(_wsad_|MyCitrixHash|MyCitrixShadow|id_validate)$" /--> |
114 | 114 | <!--securecookie host="^discussions\.citrix\.com$" name="^session_id$" /--> |
115 | | - <!--securecookie host="^training\.citrix\.com$" name="^(MoodleSession|NSC_\w+_\w+)$" /--> |
| 115 | + <!--securecookie host="^training\.citrix\.com$" name="^(MoodleSession$|NSC_)" /--> |
116 | 116 |
|
117 | | - <securecookie host="^(?:.*\.)?citrix\.com$" name=".+" /> |
| 117 | + <securecookie host="." name="." /> |
| 118 | + |
| 119 | + |
| 120 | + <!-- Redirect keeps path and args, |
| 121 | + but not forward slash: |
| 122 | + --> |
| 123 | + <rule from="^http://blogs\.citrix\.com/+" |
| 124 | + to="https://www.citrix.com/blogs/" /> |
118 | 125 |
|
| 126 | + <test url="http://blogs.citrix.com//index.htm" /> |
119 | 127 |
|
120 | 128 | <rule from="^http://cdn\.ws\.citrix\.com/" |
121 | 129 | to="https://c558080.ssl.cf2.rackcdn.com/" /> |
|
0 commit comments