<!--
	Better Business Bureau

	Other Better Business Bureau rulesets:

		- BBB_Online.org.xml
		- BBB_Silicon.org.xml


	Nonfunctional domains:

		- (www.)?labbb.org *

	* Refused


	Nonfcuntional subdomains:

		- (www.)?dc *

	* "domain has just been registered"


	Problematic domains:

		- bbb.org ¹
		- (www.)?la.bbb.org *
		- (www.)?sanjose.bbb.org *
		- (www.)?setflorida.bbb.org *
		- (www.)?us.bbb.org ¹

	¹ Dropped
	* Mismatched
	³ Shows default page


	Fully covered domains:

		- bbb.org			(→ www)
		- hurdman.app.bbb.org
		- sanjose.app.bbb.org
		- (www.)?us.bbb.org		(→ www.bbb.org)

		- (www.)?[\w-]+.bbb.org:	(www → ^)

			- assets
			- charityreports
			- (www.)?sanjose
			- seal-centralalabama
			- seal-goldengate
			- seal-newyork


	Insecure cookies are set for these domains and hosts:

		- .bbb.org
		- (area).app.bbb.org
		- charityreports.bbb.org
		- .goldengate.bbb.org
		- seal-(area).bbb.org


	Mixed content:

		- Images, on:

			- charityreports from assets.bbb.org *
			- www from $self *

	* Secured by us

-->
<ruleset name="BBB.org (partial)">

	<target host="bbb.org"/>
	<target host="*.app.bbb.org"/>
	<target host="*.bbb.org"/>
		<!--
			(www.)dcbbb.org redirects here		-->
		<exclusion pattern="^http://(?:www\.)?dc\.bbb\.org/"/>

			<test url="http://dc.bbb.org/" />
			<test url="http://www.dc.bbb.org/" />

		<exclusion pattern="http://(?:www\.)?(?:la|seflorida)\.bbb\.org/"/>

			<test url="http://la.bbb.org/" />
			<test url="http://www.la.bbb.org/" />
			<test url="http://seflorida.bbb.org/" />
			<test url="http://www.seflorida.bbb.org/" />

	<!--target host="labbb.org"/-->
	<!--target host="www.labbb.org"/-->

		<test url="http://assets.bbb.org/" />
		<test url="http://charityreports.bbb.org/" />
		<test url="http://sanjose.bbb.org/" />
		<test url="http://seal-newyork.bbb.org/seals/black-seal-200-42-whitetxt-dashlane-1.png" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.bbb\.org$" name="^(__qca|BBBSite|PHPSESSID)$" /-->
	<!--securecookie host="^\.(goldengate\.)?bbb\.org$" name="^logolink$" /-->
	<!--securecookie host="^(hurdman|sanjose)\.app\.bbb\.org$" name="^bbb$" /-->
	<!--securecookie host="^sanjose\.app\.bbb\.org$" name="^(before|current|previous)$" /-->
	<!--securecookie host="^charityreports\.bbb\.org$" name="^(ASP\.NET_SessionId|BBB_Cookie)$" /-->
	<!--securecookie host="seal-area\.bbb\.org$" name="^BBB_Cookie$" /-->

	<securecookie host="^.*\.bbb\.org$" name=".*" />
	<!--securecookie host="^www\.labbb\.org$" name=".*"/-->


	<!--rule from="^http://(?:www\.)?la\.?bbb\.org/"
		to="https://www.labbb.org/"/-->

	<rule from="^http://bbb\.org/"
		to="https://www.bbb.org/"/>

	<!--	Redirect keeps forward slash, path, and args:
								-->
	<rule from="^http://(?:www\.)?us\.bbb\.org/"
		to="https://www.bbb.org/us/" />

		<test url="http://us.bbb.org/" />
		<test url="http://www.us.bbb.org/" />

	<rule from="^http://(?:www\.)?([\w\-]+)\.bbb\.org/"
		to="https://$1.bbb.org/"/>

	<rule from="^http://(hurdman|sanjose)\.app\.bbb\.org/"
		to="https://$1.app.bbb.org/"/>

		<test url="http://hurdman.app.bbb.org/abs/login.html" />
		<test url="http://sanjose.app.bbb.org/abs/login.html" />

</ruleset>
