<!--
	For other Yahoo coverage, see Yahoo.xml.


	Fully covered hosts in *flickr.com:

		- (www.)?
		- api
		- secure
		- static

		- *.static:

			- c\d+
			- farm\d+


	Insecure cookies are set for these domains and hosts:

		- .flickr.com
		- www.flickr.com

	Note: current_identity (.flickr.com) is read
	via script and so cannot be secured.

		https://github.com/EFForg/https-everywhere/issues/239

-->
<ruleset name="Flickr.com">

	<!--	Direct rewrites:
				-->
	<target host="flickr.com" />
	<target host="api.flickr.com" />
	<target host="secure.flickr.com" />
	<target host="static.flickr.com" />
	<target host="*.static.flickr.com" />
	<target host="www.flickr.com" />

		<test url="http://farm2.static.flickr.com/1425/cameras/72157624846412485_model_large_194e38d197.jpg" />
		<test url="http://farm8.static.flickr.com/7303/buddyicons/42041051@N04_r.jpg" />
		<test url="http://farm8.static.flickr.com/7565/cameras/72157646085815427_model_large_7a8c07d8b0.jpg" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.flickr\.com$" name="^(BX|admsort|cookie_session|current_identity|density|ffs|fldetectedlang|flrb|flrbcr|flrbgdrp|flrbgmrp|flrbgrp|flrbp|flrbs|fltoto|just_registered|localization|memsort|modsort|photoPHS|photoPWS|vp|xb)$" /-->
	<!--securecookie host="^www\.flickr\.com$" name="^(liqph|liqpw|ywandp)" /-->

	<securecookie host=".*\.flickr\.com$" name="^(?!current_identity$).+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
