Skip to content

Commit 1da3cd5

Browse files
author
MB
committed
NetNow.co
1 parent 7b59cd9 commit 1da3cd5

File tree

3 files changed

+73
-0
lines changed

3 files changed

+73
-0
lines changed
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
<!--
2+
For rules not causing false/broken MCB, see NetNow.co.xml.
3+
4+
-->
5+
<ruleset name="NetNow.co (false MCB)">
6+
7+
<!-- Direct rewrites:
8+
-->
9+
<target host="netnow.co" />
10+
<target host="www.netnow.co" />
11+
12+
13+
<securecookie host="^(?:www\.)?netnow\.co$" name=".+" />
14+
15+
16+
<rule from="^http:"
17+
to="https:" />
18+
19+
</ruleset>
Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
<!--
2+
For rules causing false/broken MCB, see NetNow.co-falsemixed.xml.
3+
4+
5+
Insecure cookies are set for these hosts:
6+
7+
- netnow.co
8+
- www.netnow.co
9+
10+
11+
Mixed content:
12+
13+
- css from $self *
14+
- fonts from $self *
15+
- Images from $self *
16+
17+
* Secured by us
18+
19+
-->
20+
<ruleset name="NetNow.co (partial)">
21+
22+
<!-- Direct rewrites:
23+
-->
24+
<target host="netnow.co" />
25+
<target host="www.netnow.co" />
26+
27+
<!-- Avoid broken MCB:
28+
-->
29+
<exclusion pattern="^http://(?:www\.)?netnow\.co/+(?!favicon\.ico|wp-content/|wp-login\.php)" />
30+
31+
<!-- +ve:
32+
-->
33+
<test url="http://netnow.co/apps/" />
34+
<test url="http://netnow.co/blog/" />
35+
<test url="http://netnow.co/contact-netnow/" />
36+
<test url="http://www.netnow.co/support/" />
37+
38+
<!-- -ve:
39+
-->
40+
<test url="http://netnow.co/wp-login.php" />
41+
<test url="http://www.netnow.co/wp-content/plugins/usernoise/images/ok.png" />
42+
43+
44+
<!-- Not secured by server:
45+
-->
46+
<!--securecookie host="^(www\.)?netnow\.co$" name="^X-Mapping-[a-z]{8}$" /-->
47+
48+
49+
<rule from="^http:"
50+
to="https:" />
51+
52+
</ruleset>

utils/duplicate-whitelist.txt

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -167,6 +167,8 @@ mycanvas.com
167167
nandos.com
168168
nelonen.fi
169169
*.netapp.com
170+
netnow.co
171+
www.netnow.co
170172
newrepublic.com
171173
npmawesome.com
172174
nydailynews.com

0 commit comments

Comments
 (0)