https-everywhere-rules-raw-4.0: vendor/https-everywhere/src/chrome/content/rules/Oracle.xml
<!--
See Oracle-mismatches.xml for problematic rules.
Other Oracle rulesets:
- Atgsvcs.com.xml
- ATG_Web_Commerce.xml
- Eloqua.xml
- Estara.com.xml
- Java.net.xml
- Linksys.xml
- MySQL.xml
- NetBeans.zml
- RightNow.xml
- VirtualBox.xml
CDN buckets:
- oracle.112.2o7.net
- sun.edgeboss.net
- a147.g.akamai.net
- pressroom.oracle.com.edgekey.net
- www.oracleimg.com.edgekey.net
- docs.oracle.com.edgesuite.net
- a1049.d.akamai.net
- oraclejapan.presscentre.com
- japanmediacentre
Nonfunctional subdomains:
- isdportal *
- jdevadf (dropped)
- oukc *
- pressroom (503, akamai with valid cert)
- tahiti *
* Refused
Problematic domains:
- oracle.com subdomains:
- ^ (refused)
- crmondemand *
- docs (works, akamai)
- japanmediacentre ** (works; mismatched, CN: *.presscentre.com)
- oracleimg.com *
* Redirects to http; mismatched, CN: java.sun.com
Partially covered domains:
- (www.)oracle.com *
- docs.oracle.com **
- (www.)oracleimg.com *
* ^ → www, some paths redirect to http
** → akamai, avoiding user-visible paths, rest handled in Oracle-mismatches.xml
There are probably some data identical across shop and www that could be grabbed for www.
Fully covered domains:
- oracle.com subdomains:
- academy
- acsportal
- advancedsupport
- amr
- amr-stage
- apex
- apexea
- asktom
- bi-fusioncrm
- blogs
- blogs-stage
- campus
- cloud subdomains:
- ^
- *.em1:
- console
- javaservices
- login
- myservices
- *.us0:
- data
- loginpre
- messaging
- storage
- *.us1
- console
- javaservices
- login
- myservices
- communities
- competencycentre
- conference
- crm-fusioncrm
- crmondemand (→ www)
- digitalmedia
- dne
- download
- edelivery
- edelivery-hqdc-test
- education
- education-stage
- emeajobs
- emeapressoffice
- etrm
- fin-fusioncrm
- forums subdomains:
- ^
- cn
- kr
- forums-stage subdomains:
- ^
- cn
- kr
- fusioncrm
- fusionhelp
- fusionhelp-stage
- gcmprm
- hcm-fusioncrm
- hs-ws1
- iacademy
- ic-fusioncrm
- ilearning
- ilearningcontent
- irecruitment
- itsp
- itsp-stage
- linux
- login
- login-stage
- m
- medianetwork
- my
- myprofile
- myprofile-mktas
- oai
- oss
- otn
- partners
- plmap
- prc-fusioncrm
- prj-fusioncrm
- public-yum
- scm-fusioncrm
- search
- shop
- solutions
- stbeehive
- strtc
- suppliers
- support
- supporthtml
- updates
- wfs
- wikis
- wikis-stage
- workforce
- www-portal-stage
- www-stage
- oracleoutsourcing.com subdomains:
- bi-*
- crm-*
- fin-*
- fs-*
- hcm-*
- scm-*
- ic-*
- prc-*
- prj-*
Observed cookie subdomains:
- blogs
- cloud subdomains:
- ^
- em1 subdomains:
- console
- javaservices
- login
- myservices
- data.us0
- loginpre.us0
- us1 subdomains:
- console
- login
- myservices
- competencycenter
- crm-fusioncrm
- .edelivery
- education
- fin-fusioncrm
- fusioncrm
- hcm-fusioncrm
- ic-fusioncrm
- login
- medianetwork
- scm-fusioncrm
- shop
- solutions
- wikis
- www
Mixed content:
- Script on medianetwork from www.oracleimg.com *
- Images, on:
- medianetwork from sun.edgeboss.net
- medianetwork from www.oracleimg.com *
- medianetwork from www.oracleimg.com **
- Web bugs, on:
- events from dnn506yrbagrg.cloudfront.net *
- events from consent.truste.com *
- medianetwork from www.oracleimg.com *
* Secured by us
** Unsecurable, doesn't trip MCB
-->
<ruleset name="Oracle (partial)">
<target host="oracle.com" />
<target host="*.oracle.com" />
<!--exclusion pattern="^http://(docs|isdportal|jdevadf|oukc|pressroom|tahiti)\.oracle\.com/" /-->
<!--
Very stingy https support
most paths redirect to http
-->
<exclusion pattern="^http://www\.oracle(?:img)?\.com/(?!(?:\w+/)?assets/|\w+/[^/]+\.(?:css|gif|jpg|js|png)$)"/>
<!--
Avoid user-visible paths:
-->
<!--exclusion pattern="^http://docs\.oracle\.com/(?!.+/css/|favicon\.ico|.+/graphics/)" /-->
<target host="oracleimg.com" />
<target host="www.oracleimg.com" />
<target host="*.oracleoutsourcing.com" />
<securecookie host="^(?:\w+|\.edelivery)\.oracle\.com$" name=".+" />
<!--
Could we secure any of these safely?
-->
<!--securecookie host="^\.oracle\.com$" name="^(ORA_FND_SESSION_CRMAP\.US\.ORACLE\.COM|ORA_FUSION_PREFS|s_eVar21)$" /-->
<!--
Tracking cookies
-->
<securecookie host="^\.oracle\.com$" name="^(?:gpw_e24|s_(?:cc|nr|sq))$" />
<rule from="^http://(?:www\.)?oracle(img)?\.com/us/([^/]+)\.(css|gif|jpg|js|png)$"
to="https://www.oracle$1.com/us/assets/$2.$3" />
<rule from="^https?://(?:www\.)?oracle(img)?\.com/"
to="https://www.oracle$1.com/" />
<!-- Server doesn't drop path:
-->
<rule from="^http://crmondemand\.oracle\.com/"
to="https://www.oracle.com/us/products/applications/crmondemand/index.html" />
<rule from="^http://(i?academy|acsportal|advancedsupport|amr|amr-stage|apex|apexea|asktom|blogs(?:-stage)?|campus|cloud|\w+\.(?:em1|us0|us1)\.cloud|communities|competencycentre|conference|digitalmedia|dne|download|edelivery(?:-hqdc-test)?|education(?:-stage)?|emeajobs|emeapressoffice|etrm|(?:cn\.|kr\.)?forums(?:-stage)?|(?:bi-|crm-|fin-|[hs]cm-|ic-|pr[cj]-)?fusioncrm|fusionhelp(?:-stage)?|gcmprm|hs-ws1|ilearning(?:content)?|irecruitment|itsp|itsp-stage|linux|login(?:-stage)?|medianetwork|my?|myprofile(?:-mktas)?|oai|oss|otn|partners|plmap|public-yum|search|shop|solutions|stbeehive|strtc|suppliers|support(?:html)?|updates|wfs|wikis(?:-stage)?|workforce|www(?:-portal)?-stage)\.oracle\.com/"
to="https://$1.oracle.com/" />
<rule from="^http://docs\.oracle\.com/(?=favicon\.ico|.+/(?:cs|graphic)s/)"
to="https://a248.e.akamai.net/f/1049/1606/6m/docs.oracle.com/" />
<rule from="^http://(bi|crm|fin|fs|[hs]cm|ic|pr[cj])-(\w+)\.oracleoutsourcing\.com/"
to="https://$1-$2.oracleoutsourcing.com/" />
</ruleset>