
<!--
	CDN buckets:

		- giphygifs.s3.amazonaws.com

			- media10

		- d16jfyletng9p5.cloudfront.net


	Problematic subdomains:

		- media10 ²
		- www		(refused)

	² AmazonWS


	Fully covered subdomains:

		- (www.)?	(www → ^)
		- api
		- i
		- media
		- media10	(→ giphygifs.s3.amazonaws.com)
		- media\d+	(0-4)


	Insecure cookies are set for these domains:

		- .giphy.com


	Mixed content:

		- Images on ^ from media4.giphy.com *

	* Secured by us

-->
<ruleset name="Giphy.com">

	<target host="giphy.com" />
	<target host="*.giphy.com" />

		<!--	Direct rewrites:
					-->
		<test url="http://api.giphy.com/" />
		<test url="http://i.giphy.com/" />
		<test url="http://media.giphy.com/" />
		<test url="http://media1.giphy.com/" />
		<test url="http://media4.giphy.com/" />

		<!--	Complications:
					-->
		<test url="http://media10.giphy.com/" />
		<test url="http://www.giphy.com/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.giphy\.com$" name="^__qca$" /-->

	<securecookie host="^\.giphy\.com$" name=".+" />


	<rule from="^http://media10\.giphy\.com/"
		to="https://giphygifs.s3.amazonaws.com/" />

	<rule from="^http://www\.giphy\.com/"
		to="https://giphy.com/" />

	<rule from="^http://((?:api|i|media\d*)\.)?giphy\.com/"
		to="https://$1giphy.com/" />

</ruleset>
