|
1 | 1 | <!-- |
2 | | - Nonfunctional hosts in *adform.com: |
3 | | -
|
4 | | - - academy ᶠ |
5 | | - - blog ᶠ |
6 | | - - brandsolutions ᶠ |
7 | | - - creative ᶠ |
8 | | - - engineering ᶠ |
9 | | - - events ᶠ |
10 | | - - getcertified ᶠ |
11 | | - - join ᶠ |
12 | | - - pr-old ᶠ |
13 | | - - studio ʰ |
14 | | - - tools-tracking ᵇ |
15 | | -
|
16 | | - ᵇ Shows default page |
17 | | - ᶠ Handshake fails |
18 | | - ʰ Redirects to http |
19 | | -
|
20 | | -
|
21 | | - Insecure cookies are set for these domains and hosts: ᶜ |
22 | | -
|
23 | | - - .adform.net |
24 | | - - track.adform.net |
25 | | -
|
26 | | - ᶜ See https://owasp.org/index.php/SecureFlag |
27 | | -
|
28 | | -
|
29 | | - Mixed content: |
30 | | -
|
31 | | - - Images on showroom from showroom.adform.com ˢ |
32 | | -
|
33 | | - ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/ |
34 | | -
|
| 2 | + Related: |
| 3 | + Adform.net.xml |
| 4 | + Adformdsp.net.xml |
35 | 5 | --> |
36 | | -<ruleset name="Adform (partial)"> |
37 | | - |
38 | | - <!-- Direct rewrites: |
39 | | - --> |
| 6 | +<ruleset name="Adform.com"> |
40 | 7 | <target host="adform.com" /> |
41 | | - <target host="showroom.adform.com" /> |
42 | | - <target host="site.adform.com" /> |
43 | 8 | <target host="www.adform.com" /> |
44 | | - |
45 | | - <target host="a1.adform.net" /> |
46 | | - <target host="adx.adform.net" /> |
47 | | - <target host="asia.adform.net" /> |
48 | | - <target host="cp.adform.net" /> |
49 | | - <target host="dmp.adform.net" /> |
50 | | - <target host="files.adform.net" /> |
51 | | - <target host="s1.adform.net" /> |
52 | | - <target host="s2.adform.net" /> |
53 | | - <target host="server.adform.net" /> |
54 | | - <target host="track.adform.net" /> |
55 | | - <target host="us.adform.net" /> |
56 | | - |
57 | | - <target host="s1.adformdsp.net" /> |
58 | | - <target host="s2.adformdsp.net" /> |
59 | | - <target host="server.adformdsp.net" /> |
60 | | - |
61 | | - <!-- Set cookies without Secure: |
62 | | - --> |
63 | | - <!--test url="http://dmp.adform.net/dmp/profile/?CC=1&pid=1&" /--> |
64 | | - <!--test url="http://track.adform.net/Serving/TrackPoint/?pm=1" /--> |
65 | | - |
66 | | - <!-- Complications: |
67 | | - --> |
68 | 9 | <target host="academy.adform.com" /> |
69 | 10 | <target host="blog.adform.com" /> |
| 11 | + <target host="brandsolutions.adform.com" /> |
70 | 12 | <target host="creative.adform.com" /> |
| 13 | + <target host="engineering.adform.com" /> |
| 14 | + <target host="events.adform.com" /> |
| 15 | + <target host="getcertified.adform.com" /> |
| 16 | + <target host="join.adform.com" /> |
| 17 | + <target host="pr-old.adform.com" /> |
| 18 | + <test url="http://pr-old.adform.com/torifi-production-guides/advertising-formats/" /> |
| 19 | + <target host="showroom.adform.com" /> |
| 20 | + <target host="site.adform.com" /> |
| 21 | + <target host="studio.adform.com" /> |
| 22 | + <target host="support.adform.com" /> |
| 23 | + <target host="tools-tracking.adform.com" /> |
71 | 24 |
|
72 | | - <exclusion pattern="^http://(?:academy|blog|creative)\.adform\.com/" /> |
73 | | - |
74 | | - <!-- +ve: |
75 | | - --> |
76 | | - <test url="http://academy.adform.com/" /> |
77 | | - <test url="http://blog.adform.com/" /> |
78 | | - <test url="http://creative.adform.com/" /> |
79 | | - |
80 | | - |
81 | | - <!-- Not secured by server: |
82 | | - --> |
83 | | - <!--securecookie host="^\.adform\.net$" name="^uid$" /--> |
84 | | - <!--securecookie host="^track\.adform\.net$" name="^C$" /--> |
85 | | - |
86 | | - <securecookie host="^\w.*\.adform\.com$" name="." /> |
87 | | - <!-- |
88 | | - name="^(GCM|TPC)$" |
89 | | - --> |
90 | | - <securecookie host="\.adform\.net$" name="." /> |
91 | | - <!-- |
92 | | - name="^uid$" |
93 | | - --> |
94 | | - <securecookie host="\.adformdsp\.net$" name="." /> |
95 | | - |
96 | | - |
97 | | - <!-- Protocol-relative links on ^site.../$: |
98 | | - --> |
99 | | - <rule from="^https://(academy|blog|creative)\.adform\.com/" |
100 | | - to="http://$1.adform.com/" |
101 | | - downgrade="1" /> |
102 | | - |
103 | | - <test url="https://academy.adform.com/" /> |
104 | | - <test url="https://blog.adform.com/" /> |
105 | | - <test url="https://creative.adform.com/" /> |
106 | | - |
107 | | - <rule from="^http:" |
108 | | - to="https:" /> |
| 25 | + <securecookie host=".+" name=".+" /> |
109 | 26 |
|
| 27 | + <rule from="^http:" to="https:" /> |
110 | 28 | </ruleset> |
0 commit comments