<!--
	For rules causing false/broken MCB, see OverDrive.com-falsemixed.xml.

	Other OverDrive rulesets:

		- contentreserve.com.xml
		- libraryreserve.com.xml


	Nonfunctional hosts in *overdrive.com:

		- blogs ᵈ
		- help ʰ
		- devon.lib ʰ
		- eastsussexlibrary.lib ʰ

	ᵈ Dropped
	ʰ Redirects to http


	Problematic hosts in *overdrive.com:

		- company ˣ
		- ox-i ᴬ
		- partners ˣ

	ᴬ Akamai/mismatched
	ˣ Mixed css, see https://www.paulirish.com/2010/the-protocol-relative-url/


	Insecure cookies are set for these hosts:

		- (account_vhost).overdrive.com
		- ox-d.overdrive.com


	Mixed content:

		- css on company, partners from $self ˢ
		- Images on company, partners from $self ˢ
		- Bug on partners from ox-d.overdrive.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="OverDrive.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="overdrive.com" />
	<target host="app.overdrive.com" />

	<target host="libraryreserve.cdn.overdrive.com" />
	<target host="lightning.cdn.overdrive.com" />
	<target host="thunder.cdn.overdrive.com" />

	<!--target host="company.overdrive.com" /-->
	<target host="omc.overdrive.com" />
	<target host="ox-d.overdrive.com" />
	<!--target host="partners.overdrive.com" /-->
	<target host="www.overdrive.com" />

	<!--	(Accounts:)
				-->
	<target host="norfolk.overdrive.com" />

	<!--	Complications:
				-->
	<target host="ox-i.overdrive.com" />
	
		<test url="http://libraryreserve.cdn.overdrive.com/100429/50/1.40/spacer.gif" />

		<!--	Sets cookie without Secure:
							-->
		<!--test url="http://ox-d.overdrive.com/w/1.0/afr?auid=&amp;cb=" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(account_vhost)\.overdrive\.com$" name="^(?:_csrf|eu-notify-setting)$" /-->
	<!--securecookie host="^ox-d\.overdrive\.com$" name="^OX_u$" /-->

	<securecookie host="^\." name="^(?:_gat?$|_gat_|s_)" />
	<securecookie host="^\w" name="." />


	<rule from="^http://ox-i\.overdrive\.com/"
		to="https://ssl-i.cdn.openx.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
