https-everywhere-rules-raw-4.0: vendor/https-everywhere/src/chrome/content/rules/Yahoo.xml
<!--
Other Yahoo rulesets:
- Flickr.xml
- Right-Media.xml
- Yahoo_APIs.xml
- Yahoo_Japan.xml
- Yimg.com.xml
- YUI_Library.xml
CDN buckets:
- contextualads.yahoo.net.edgesuite.net
- a1907.g.akamai.net
- yahoosports.teamfanshop.com
Nonfunctional domains:
- yahoo.com subdomains:
- advertising ¹
- advertisingcentral ¹
- answers ²
- fr.answers ³
- malaysia.answers ³
- au ¹
- autos ¹
- br ²
- ca ²
- cn ¹
- help.cn ¹
- news.cn ¹
- de ²
- docs ¹
- fr.docs ¹
- en-maktoob ⁴
- es ²
- eurosport ³
- uk.eurosport ³
- everything ³
- fantasysports ¹
- finance subdomains:
- ^ ²
- chart ¹
- ichart ¹
- streamerapi ¹
- fr ²
- health ¹
- hk ³
- hsrd ¹
- ichart ¹
- id ²
- ie ²
- in ²
- it ²
- kr ¹
- labs ¹
- tw.ipeen.lifestyle ¹
- tw.lifestyle ¹
- local ³
- maktoob ⁴
- maps ³
- gws2.maps ¹
- mx ²
- news subdomains:
- cn ¹
- dk ¹
- ie ¹
- kr ¹
- opi ¹
- ph ²
- qc ²
- ar.rd ¹
- research ¹
- rightmedia (shows speakers.watersmartinnovations.com; mismatched, CN: *.watersmartinnovations.com)
- tools.search ⁵
- gossip-ss.us.search ¹
- sg ²
- shopping ³
- sports ²
- suggestions ¹
- tw ¹
- uk ²
- vn ²
- voices ²
- cn.weather ¹
- visit.webhosting ⁵
- count.yisou ¹
- dmros.ysm (400, valid cert)
- yahoo.net subdomains:
- health (504, akamai)
- uk.match ⁵
- uk.matchaffinity ⁵
- ypolicyblog.com (reset)
- www.ypolicyblog.com
¹ Refused
² Redirects to http, valid cert
³ 404, valid cert
⁴ Redirects to http; mismatched, CN: www.yahoo.com
⁵ Dropped
Problematic domains:
- i.acdn.us ¹
- cm.npc-morris.overture.com ²
- cm.npc-nydn.overture.com ²
- totaltravel.co.uk ³
- www.totaltravel.co.uk ⁴
- totaltravel.com ³
- www.totaltravel.com ⁴
yahoo.com subdomains:
- fr-ca.actualites ⁵
- ar (mixed css from l.yimg.com)
- id.berita ⁵
- mx.clima ⁵
- dk ⁴
- feedback ⁴
- help (valid cert, 404)
- info (mixed css from l.yimg.com)
- lifestyle subdomains:
- ar ⁴
- br ⁴
- ca ⁴
- es ⁴
- fr ⁴
- ie ⁴
- it ⁴
- external.global.media ⁵
- fr.meteo ⁵
- it.meteo ⁵
- webservices.mobile (works, self-signed)
- br.mulher ⁵
- de.nachrichten ⁵
- news subdomains:
- ar ⁴
- br ⁴
- de ⁴
- id ⁴
- it ⁴
- mx ⁴
- qc ⁴
- notepad (works; mismatched, CN: *.calendar.yahoo.com)
- it.notizie ⁵
- fr.pourelles ⁵
- ru ⁴
- es.tendencias ⁵
- br.tempo ⁵
- ar.tiempo ⁵
- es.tiempo ⁵
- weather subdomains:
- ar ⁴
- au ⁴
- br ⁴
- de ⁴
- es ⁴
- fr ⁴
- kr ⁴
- tw ⁴
- mx ⁴
- de.wetter ⁵
- contextualads.yahoo.net (works, akamai)
- investor.yahoo.net ¹
- (www.)yhoo.it (refused, bit.ly alias)
¹ Dropped
² Works, mismatched, CN: *.ysm.yahoo.com
³ Works; mismatched, CN: builder.totaltravel.com
⁴ Refused
⁵ Works; mismatched, CN: *.news.yahoo.com
Partially covered domains:
- (www.)totaltravel.com (→ au.totaltravel.yahoo.com, haven't found images/)
- developer.yahoo.com (homepage redirects to http)
- mail.yahoo.com ($ redirects to http)
- ca.sports.yahoo.com ($ redirects to ^sports.yahoo.com)
- contextualads.yahoo.net (→ akamai, avoiding user-visible paths)
- investor.yahoo.net (→ investor.shareholder.com)
- uk.health.lifestyle.yahoo.net (→ s.yimg.com)
Fully covered domains:
- i.acdn.us (→ s.yimg.com/ck/)
- (www.)totaltravel.co.uk (→ au.totaltravel.yahoo.com)
- yahoo.com subdomains:
- (www.)
- \w\w.adserver:
- au
- uk
- us
- beap.adx
- c5.ah
- c5a.ah
- cookex.amp
- s-cookex.amp
- [aoyz].analytics
- y3.analytics
- global.ard
- bc subdomains:
- clicks.beap
- csc.beap
- pn1
- row
- us
- boss
- celebrity
- migration.cn
- br.contribuidores
- contributor
- uk.contributor
- dk (→ www)
- edit
- na.edit
- edit.europe
- java.europe (→ adgallery.zenfs.com)
- feedback (→ yahoo.uservoice.com)
- geo
- groups
- moderators.groups
- help
- secure.help
- homes
- legalredirect
- lifestyle subdomains:
- ar (→ ar.mujer)
- au
- ca (→ ca.shine)
- de
- hk
- ie (→ uk.lifestyle)
- in
- it
- mx (→ mx.mujer)
- uk
- login
- us.lrd
- gh.bouncer.login
- m
- r.m
- \w\w.m:
- ar
- au
- br
- ca
- cn
- de
- es
- fr
- hk
- id
- ie
- in
- it
- kr
- ph
- qc
- sg
- mx
- tw
- uk
- us
- vn
- *.mail:
- overview
- us-mg6
- c.c.yom
- \w+-c.c.yom
- mlogin
- mobile
- movies
- ar.mujer
- mx.mujer
- music
- *.msg:
- dps (→ ycpi-mail-dps)
- prod2.rest-core
- prod1.rest-notify
- ycpi-mail-dps
- ycpi-mail-preferences
- ycpi-mail-rest-core
- ycpi-mail-rest-core2
- my
- ucs.netsvs
- news subdomains:
- ^
- ar (→ ar.noticias)
- br (→ br.noticias)
- au
- ca
- es (→ es.noticias)
- fr
- hk
- in
- mx (→ mx.noticias)
- ph
- sg
- tw
- uk
- vn
- cookiex.ngd
- noticias subdomains:
- ar
- br
- es
- mx
- omg
- rtb.pclick
- query subdomains:
- analytics
- mailapps
- media
- ucs
- us-locdrop
- video
- us.rd
- ru (→ www)
- screen
- search
- images.search
- rtb.pclick.secure
- shine
- order.smallbusiness
- data.toolbar
- au.totaltravel
- travel
- tv
- us
- qos.video
- yep.video
- weather subdomains:
^
- ca
- hk
- in
- ph
- sg
- tw (→ tw.news)
- uk
- us
- yahoo.net subdomains:
- image-c.c.yom.mail
- lib.store
- order.store
Mixed content:
- css on ar.yahoo.com, info.yahoo.com, and ca.sports.yahoo.com from l.yimg.com *
- Ads/web bugs, on:
- ar.yahoo.com from b.scorecardresearch.com *
- ar.yahoo.com, m.yahoo.com, \w\w.m.yahoo.com, and ar.mujer.yahoo.com from csc.beap.bc.yahoo.com *
- games.yahoo.com and music.yahoo.com from rtb.pclick.yahoo.com *
- au.news.yahoo.com from au.adserver.yahoo.com *
- shine.yahoo.com from www.facebook.com *
- Images, on:
- ar.yahoo.com, games.yahoo.com, info.yahoo.com, m.yahoo.com, us.m.yahoo.com, au.news.yahoo.com, screen.yahoo.com, and ca.sports.yahoo.com from l.yimg.com *
- \w\w.weather.yahoo.com from media.zenfs.com *
* Secured by us
Reported to fix bug
https://trac.torproject.org/projects/tor/ticket/4441
If you have a Yahoo Mail account, please test this ruleset!
-->
<ruleset name="Yahoo! (partial)">
<target host="i.acdn.us" />
<target host="rocketmail.com" />
<target host="www.rocketmail.com" />
<target host="totaltravel.co.uk" />
<target host="www.totaltravel.co.uk" />
<target host="totaltravel.com" />
<target host="*.totaltravel.com" />
<exclusion pattern="^http://(?:www\.)?totaltravel\.com/images/" />
<target host="yahoo.com" />
<target host="*.yahoo.com" />
<exclusion pattern="^http://developer\.yahoo\.com/(?:$|\?)" />
<exclusion pattern="^http://mail\.yahoo\.com/+(?:$|\?)" />
<!--
Refused:
-->
<!--exclusion pattern="^http://(cn|de|dk|id|ie|it|qc)\.news\.yahoo\.com/" /-->
<!--
- $ redirects to ^sports
- top/ has mixed css from l.yimg.com
-->
<exclusion pattern="^http://ca\.sports\.yahoo\.com/+(?!featured/)" />
<target host="*.yahoo.net" />
<!--
Avoid user-visible paths:
-->
<!--exclusion pattern="^http://contextualads\.yahoo\.net/(?!js/|style/)" /-->
<!--
Links images relative to /
-->
<!--exclusion pattern="^http://contextualads\.yahoo\.net/style/screen\.css" /-->
<!--
Some pages redirect to http:
-->
<exclusion pattern="^http://smallbusiness\.yahoo\.com/(?!servicecheck\.php)" />
<target host="*.yahoofs.com" />
<target host="yhoo.it" />
<target host="ymail.com" />
<target host="www.ymail.com" />
<target host="*.zenfs.com" />
<!-- Some Yahoo cookies are cross-domain cookies.
It's a case of figuring out which ones
aren't needed on unsecurable pages.
- .yahoo.com
- AO
- B
- Set by y3.analytics.yahoo.com/itr.pl & us.bc.yahoo.com/b
- BA
- t=\d{10}
- CH
- \w{59}/
- F
- HP
- 0
- MSC
- t=\d{10}X
- PH (set by hjsal)
- SSL
- ucs (set by ucs.query)
- bnas=\d
- V
- v=\d.\d&cc=0&m=0
- Y
- .news.yahoo.com
- ywadp\d+
- \d+
- .uk.yahoo.com
- epc
- 1
- fpc
- d=(\w+.){7}\w+- -&v=1
- FPCK
- \w{50}
- fpc_s
- d=(\w+.){7}\w+- -&v=1
- fpt
- d=(\w+.){7}\w+- -&v=1
- fpps
- _page=%7B%22wsid%22%3A%22\d{10}%22%7D
- .us.yahoo.com
- fpc
- d=(\w+.){4}\w+-&v=2
- fpms
- p_\d{8}=%7B%22stream_filter%22%3A%22%3A%3A\d{13}%22%7D
- fpt
- d=\w+.\w+.\w+&v=1
Others observed:
- .search.yahoo.com
- sSN
- \w{63}\.\w{22}\-{2}
-->
<securecookie host="^\.yahoo\.com$" name="^(?:AO|B|SSL)$" />
<securecookie host="^(?:\.analytics|\.mail|movies|news|(?:us-locdrop|video)\.query|images\.search|us|\.www)\.yahoo\.com$" name=".+" />
<securecookie host=".+-c\.c\.yom\.mail\.yahoo\.net$" name=".+" />
<securecookie host="^\.zenfs\.com$" name="^BX$" />
<rule from="^http://i\.acdn\.us/"
to="https://s.yimg.com/ck/" />
<rule from="^http://(?:www\.)?(?:rocket|y)mail\.com/"
to="https://mail.yahoo.com/" />
<rule from="^http://(?:www\.)?totaltravel\.co(?:m|\.uk)/"
to="https://au.totaltravel.yahoo.com/" />
<rule from="^http://builder\.totaltravel\.com/"
to="https://builder.totaltravel.com/" />
<!-- This rule must be above the main one:
-->
<rule from="^http://dps\.msg\.yahoo\.com/"
to="https://ycpi-mail-dps.msg.yahoo.com/" />
<rule from="^http://((?:\w\w\.adserver|beap\.adx|c5a?\.ah|y\.analytics|(?:s-)?cookex\.amp|(?:[aosz]|y3)\.analytics|global\.ard|(?:clicks\.beap|csc\.beap|pn1|row|us)\.bc|boss|calendar|celebrity|migration\.cn|br\.contribuidores|(?:uk\.)?contributor|developer|(?:na\.)?edit|edit\.europe|geo|groups|moderators\.groups|help|secure\.help|homes|legalredirect|(?:au|de|hk|in|it|uk)\.lifestyle|(?:gh\.bouncer\.)?login|us\.l?rd|m|r\.m|\w\w\.m|(?:[\w-]+\.)?mail|mlogin|mobile|movies|[\w.-]+\.msg|music|my|ucs\.netsvs|news|(?:au|ca|fr|hk|in|ph|sg|tw|uk)\.news|cookiex\.ngd|omg|rtb\.pclick|(?:analytics|mailapps|media|ucs|us-locdrop|video)\.query|screen|search|images\.search|sec|rtb\.pclick\.secure|shine|(?:order\.)?smallbusiness|ca\.sports|data\.toolbar|au\.totaltravel|travel|tv|us|(?:qos|yep)\.video|weather|(?:ca|hk|in|sg|ph|uk|us)\.weather|www)\.)?yahoo\.com/"
to="https://$1yahoo.com/" />
<rule from="^http://(?:dk|ru)\.yahoo\.com/"
to="https://www.yahoo.com/" />
<rule from="^http://java\.europe\.yahoo\.com/"
to="https://adgallery.zenfs.com/" />
<rule from="^http://feedback\.yahoo\.com/"
to="https://yahoo.uservoice.com/" />
<rule from="^http://([\w-]+)\.c\.yom\.mail\.yahoo\.(com|net)/"
to="https://$1.c.yom.mail.yahoo.$2/" />
<rule from="^http://(ar|mx)\.(?:lifestyle|mujer)\.yahoo\.com/"
to="https://$1.mujer.yahoo.com/" />
<rule from="^http://ca\.(?:lifestyle|shine)\.yahoo\.com/"
to="https://ca.shine.yahoo.com/" />
<!-- Server drops path and args:
-->
<rule from="^http://ie\.lifestyle\.yahoo\.com/.*"
to="https://uk.lifestyle.yahoo.com/" />
<rule from="^http://(ar|br|es|mx)\.n(?:ew|oticia)s\.yahoo\.com/"
to="https://$1.news.yahoo.com/" />
<!-- Cert only matches us.rd,
all appear equivalent.
-->
<rule from="^http://rds?\.yahoo\.com/"
to="https://us.rd.yahoo.com/" />
<!-- Server drops path and args:
-->
<rule from="^http://tw\.weather\.yahoo\.com/.*"
to="https://tw.news.yahoo.com/weather-forecast/" />
<rule from="^http://contextualads\.yahoo\.net/(?=js/|style/(?!screen\.css))"
to="https://a248.e.akamai.net/f/1907/9547/9m/contextualads.yahoo.net/" />
<rule from="^http://uk\.health\.lifestyle\.yahoo\.net/images/"
to="https://s.yimg.com/lq/lib/lsl/i/uk/" />
<rule from="^http://investor\.yahoo\.net/common/"
to="https://investor.shareholder.com/common/" />
<rule from="^http://(lib|order)\.store\.yahoo\.net/"
to="https://$1.store.yahoo.net/" />
<rule from="^http://([\w-]+)\.yahoofs\.com/"
to="https://$1.yahoofs.com/" />
<rule from="^http://yhoo\.it/"
to="https://bit.ly/" />
<rule from="^http://(\w+)\.zenfs\.com/"
to="https://$1.zenfs.com/" />
</ruleset>