<!--
	Commit msg: https://trac.torproject.org/projects/tor/ticket/12800


	Other Citrix rulesets:

		- Citrix_Online.com.xml
		- Citrix_Online_CDN.com.xml
		- GoToAssist.com.xml
		- GoToMeeting.com.xml
		- GoToTraining.com.xml
		- GoToWebinar.com.xml
		- ShareFile.com.xml
		- ShareFile_support.com.xml


	CDN buckets:

		- c558080.r80.cf2.rackcdn.com

			- cdn.ws.citrix.com


	Nonfunctional domains:

		- open.citrix.com		Refused
		- (www.)joingotomeeting.com
		- (www.)jointraining.com
		- (www.)joinwebinar.com


	Problematic domains:

		- cdn.ws.citrix.com	(akamai)


	Partially covered hosts in *citrix.com:

		- discussions *
		- training *

	* Avoiding broken MCB


	Fully covered hosts in *citrix.com:

		- (www.)?
		- blogs
		- citrixready
		- community
		- go
		- search
		- staging-cq
		- support
		- tarpon
		- cdn.ws	(→ c558080.ssl.cf2.rackcdn.com)


	Insecure cookies are set for these domains and hosts:

		- .citrix.com
		- discussions.citrix.com
		- training.citrix.com


	Mixed content:

		- css, on:

			- discussions from *.rackcdn.com
			- training from $self

		- Images, on:

			- discussions from $self
			- training from www.citrix.com

-->
<ruleset name="Citrix.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="citrix.com" />
	<target host="blogs.citrix.com" />
	<target host="citrixready.citrix.com" />
	<target host="community.citrix.com" />
	<target host="discussions.citrix.com" />
	<target host="eu.citrix.com" />
	<target host="go.citrix.com" />
	<target host="search.citrix.com" />
	<target host="support.citrix.com" />
	<target host="staging-cq.citrix.com" />
	<target host="tarpon.citrix.com" />
	<target host="training.citrix.com" />
	<target host="www.citrix.com" />

	<!--	Complications:
				-->
	<target host="cdn.ws.citrix.com" />

		<!--	Avoid broken MCB:
						-->
		<exclusion pattern="^http://discussions\.citrix\.com/+(?!public/)" />
		<exclusion pattern="^http://training\.citrix\.com/+(?!favicon\.ico|theme/)" />

			<!--	+ve:
					-->
			<test url="http://discussions.citrix.com/forum/363-storefront/" />
			<test url="http://discussions.citrix.com/topic/365473-gssexception/" />

			<test url="http://training.citrix.com/cms/education/networking/" />
			<test url="http://training.citrix.com/cms/index.php/certification/" />
			<test url="http://training.citrix.com/mod/ctxcatalog/training.php?lang=ja" />

			<!--	-ve:
					-->

			<test url="http://discussions.citrix.com/public/style_images/master/attachicon.gif" />

			<test url="http://training.citrix.com/favicon.ico" />
			<test url="http://training.citrix.com/theme/ctxmain/pix/search_gradient.png" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.citrix\.com$" name="^(_wsad_MyCitrixHash|MyCitrixShadow|id_validate)$" /-->
	<!--securecookie host="^discussions\.citrix\.com$" name="^session_id$" /-->
	<!--securecookie host="^training\.citrix\.com$" name="^(MoodleSession|NSC_\w+_\w+)$" /-->

	<securecookie host="^(?:.*\.)?citrix\.com$" name=".+" />


	<rule from="^http://cdn\.ws\.citrix\.com/"
		to="https://c558080.ssl.cf2.rackcdn.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
