<!--
	For rules causing MCB, see hao123.com-mixedcontent.xml.

	For other Baidu coverage, see Baidu.xml.


	Nonfunctional hosts in *hao123.com:

		- ae ᵈ
		- book ᵃ
		- common ᵈ
		- static.book ᵃ
		- dl ᶠ
		- en ᵈ
		- feedback	(times out)
		- img ᵈ
		- img[1-46] ᵈ
		- life *
		- live *
		- m ᶠ
		- moe *
		- music ᵈ
		- qipai ᵈ
		- sjrj ᵈ
		- tejia ᵈ
		- topic ʰ
		- tuan ᵈ
		- tw ᵈ

	ᵃ Shows www.zongheng.com
	* Blank page
	ᵈ Dropped
	ᶠ Handshake fails
	ʰ Redirects to HTTP


	Problematic hosts in *hao123.com:

		- ^ ᵈ
		- djyx ˣ
		- game ˣ
		- lady ˣ
		- pic ˣ
		- soft ˣ
		- tianqi ˣ
		- vip ˣ
		- www ˣ
		- wyyx ˣ
		- xyx ˣ

	ᵈ Dropped, preemptable redirect
	ˣ Mixed css or iframes


	Insecure cookies are set for these domains and hosts: ᶜ

		- .hao123.com:
		- .common.hao123.com:
		- .game.hao123.com:
		- .pic.hao123.com:
		- .tianqi.hao123.com:
		- .topic.hao123.com:
		- vip.hao123.com:
		- .vip.hao123.com:
		- www.hao123.com:
		- .www.hao123.com:

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- iframes, on:

			- lady from yule.2258.com
			- lady from tejia.hao123.com ᵈ
			- pic from xiuxiu.web.meitu.com ³
			- vip from $self ˢ
			- vip from www.baidu.com ˢ
			- xyx from www.hao123.com

		- flash on game from v.163.com ʳ

		- css, on:

			- game, lady, tianqi, vip, www from s[0-2].hao123img.com
			- game from sc[0-4].hao123img.com
			- djyx, game, soft, wyyx from sh[0-3].hao123img.com
			- vip from vip.bdimg.com

		- Images, on:

			- vip from [a-h].hiphotos.baidu.com ᵈ
			- game, lady, soft, tianqi, vip, www, xyx from s[0-4].hao123img.com
			- djyx, pic, wyyx from sc[1-4].hao123img.com
			- djyx, soft, wyyx from sh[0-4].hao123img.com
			- djyx from soft.hao123.com
			- pic from img.hao123.com ᵈ
			- pic from img[1-36].hao123.com ᵈ
			- tianqi from bcs.91.com
			- tianqi from bcs.img.r1.91.com
			- www from $self ˢ
			- xyx from p[1-4].xyx.hao123img.com

		- favicon on djyx, game, lady, pic, soft, tianqi, wyyx from www.hao123.com ˢ

	³ Unsecurable <= 403
	ʳ Unsecurable <= refused

-->
<ruleset name="hao123.com (partial)">

	<!--	Direct rewrites:
				-->
	<!--target host="djyx.hao123.com" /-->
	<!--target host="game.hao123.com" /-->
	<!--target host="lady.hao123.com" /-->
	<!--target host="pic.hao123.com" /-->
	<!--target host="soft.hao123.com" /-->
	<!--target host="tianqi.hao123.com" /-->
	<target host="user.hao123.com" />
	<!--target host="v.hao123.com" /-->
	<!--target host="vip.hao123.com" /-->
	<!--target host="www.hao123.com" /-->
	<!--target host="wyyx.hao123.com" /-->
	<!--target host="xyx.hao123.com" /-->

		<!--	Mixed iframe:
					-->
		<!--test url="http://pic.hao123.com/hezuo/meitu" /-->

		<!--	Mixed css:
					-->
		<!--test url="http://game.hao123.com/article/1/1211" /-->
		<!--test url="http://www.hao123.com/shouji" /-->

	<!--	Complications:
				-->
	<!--target host="hao123.com" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.hao123\.com$" name="^(?:_H_CS_C|BAIDUID)$" /-->
	<!--securecookie host="^\.game\.hao123\.com$" name="^hao123-game-vp$" /-->
	<!--securecookie host="^vip\.hao123\.com$" name="^org$" /-->
	<!--securecookie host="^\.(?:common|pic|tianqi|topic|vip)\.hao123\.com$" name="^__bsi$" /-->
	<!--securecookie host="^www\.hao123\.com$" name="^ft$" /-->
	<!--securecookie host="^\.www\.hao123\.com$" name="^(?:__bsi|fromhttp|hz)$" /-->

	<securecookie host="^\.topic\." name="." />
	<securecookie host="^\w" name="." />


	<!--rule from="^http://hao123\.com/"
		to="https://www.hao123.com/" /-->

	<rule from="^http:"
		to="https:" />

</ruleset>
