<!--
	For rules causing false/broken MCB, see TYPO3.org-falsemixed.xml.

	Other TYPO3 rulesets:

		- T3Blog.com.xml


	Nonfunctional subdomains:

		- demo ¹
		- lists ²

	¹ Dropped
	² Refused


	Problematic subdomains:

		- docs ¹
		- flow ¹
		- neos ²

	¹ Mixed css from $self
	² Mismatched


	Insecure cookies are set for these domains and hosts:

		- .typo3.org
		- buzz.typo3.org
		- forge.typo3.org
		- .forum.typo3.org


	Mixed content:

		- css on flow from $self *
		- Images flow from $self *
		- favicon on buzz, flow from $self *
		- Bug on ^, buzz, forum, wiki from wiki.typo3.org *

	⁴ Secured by us

-->
<ruleset name="TYPO3 (partial)">

	<!--	Direct rewrites:
				-->
	<target host="typo3.org"/>
	<target host="association.typo3.org" />
	<target host="buzz.typo3.org" />
	<target host="certification.typo3.org" />
	<target host="docs.typo3.org" />
	<target host="flow.typo3.org" />
	<target host="forge.typo3.org" />
	<target host="forum.typo3.org" />
	<target host="get.typo3.org" />
	<target host="git.typo3.org" />
	<target host="piwik.typo3.org" />
	<target host="review.typo3.org" />
	<target host="shop.typo3.org" />
	<target host="wiki.typo3.org" />
	<target host="www.typo3.org" />

	<!--	Complications:
				-->
	<target host="neos.typo3.org" />

		<!--	Avoid false/broken MCB:
						-->
		<exclusion pattern="^http://docs\.typo3\.org/+(?!css/|favicon\.ico|fonts/|i/|t3extras/)" />
		<exclusion pattern="^http://flow\.typo3\.org/+(?!_Resources/)" />

			<!--	+ve:
					-->
			<test url="http://docs.typo3.org/getthedocs/" />
			<test url="http://docs.typo3.org/typo3cms/" />
			<test url="http://docs.typo3.org/typo3cms/CoreApiReference/" />
			<test url="http://docs.typo3.org/typo3cms/Index.html" />
			<test url="http://docs.typo3.org/typo3cms/InstallationGuide/" />
			<test url="http://docs.typo3.org/typo3cms/SecurityGuide/" />
			<test url="http://docs.typo3.org/typo3cms/TyposcriptSyntaxReference/" />

			<test url="http://flow.typo3.org/community" />
			<test url="http://flow.typo3.org/home" />
			<test url="http://flow.typo3.org/support" />

			<!--	-ve:
					-->
			<test url="http://docs.typo3.org/css/t3_to_be_integrated.css" />
			<test url="http://docs.typo3.org/favicon.ico" />
			<test url="http://docs.typo3.org/fonts/share-regular-webfont.woff" />
			<test url="http://docs.typo3.org/i/arrow-r-888888-17x17.png" />
			<test url="http://docs.typo3.org/t3extras/css/print.css" />

			<test url="http://flow.typo3.org/_Resources/Static/Packages/TYPO3.FlowTypo3Org/Stylesheets/print.css" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.typo3\.org$" name="^fe_typo_user$" /-->
	<!--securecookie host="^buzz\.typo3\.org$" name="^fe_typo_user$" /-->
	<!--securecookie host="^forge\.typo3\.org$" name="^_redmine_session$" /-->
	<!--securecookie host="^\.forum\.typo3\.org$" name="^fud_session_\d+$" /-->

	<securecookie host="^\.typo3\.org$" name="^fe_typo_user$" />
	<securecookie host="^(?:buzz|forge|\.forum)\.typo3\.org$" name=".+" />


	<!--	Redirect keeps path and args,
		but not forward slash:
					-->
	<rule from="^http://neos\.typo3\.org/+"
		to="https://www.neos.io/" />

		<test url="http://neos.typo3.org//" />

	<rule from="^http:"
		to="https:" />
</ruleset>
