<!--
	Other Politico rulesets:

		- Politico_Pro.com.xml


	Nonfunctional hosts in *politico.com:

		- dyn ʳ
		- pro.beta.ops ᵈ

	ᵈ Dropped
	ʳ Refused


	Problematic hosts in *politico.com:

		- ^ * ᵐ ᵘ
		- images ᵐ
		- static ⁵
		- static2 ᵐ
		- tk ᵐ
		- www ⁴

	* Protocol-relative redirect
	⁴ 404, equivalent to another domain
	⁵ 504, equivalent to another domain
	ᵐ Mismatched
	ᵘ Untrusted root


	Mixed content:

		- Images on secure from static2.politico.com ᵐ
		- favicon on secure from static.politico.com ˢ

	ᵐ Not secured by us <= mismatched
	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Politico.com (partial)"
	default_off="webmaster request">

	<!--	Direct rewrites:
				-->
	<target host="login.politico.com" />
	<target host="secure.politico.com" />
	<target host="static3.politico.com" />

		<!--	$ 404s, so:
					-->
		<test url="http://login.politico.com/_login?base=http%3A%2F%2Fwww.politico.com" />
		<test url="http://static3.politico.com/resource/images/website/shared/template/bg-noise.24d18bcf9d414e030c36ffd7f30648e8.jpg" /><!--	2033 -->

		<test url="http://tk.politico.com/zmr6qqx.js" />

	<!--	Complications:
				-->
	<target host="politico.com" />
	<target host="static.politico.com" />
	<target host="www.politico.com" />

		<test url="http://static.politico.com/cf/05/ee684a274496b04fa20ba2978da1/politico.png" /><!--	1064 -->


	<securecookie host="^\." name="^(?:_ga|optimizely)" />
	<securecookie host="^\w" name="." />


	<rule from="^http://(?:www\.)?politico\.com/"
		to="https://secure.politico.com/" />

	<rule from="^http://static\.politico\.com/"
		to="https://static3.politico.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
