<!--
	See Oracle-mismatches.xml for problematic rules.


	Other Oracle rulesets:

		- Atgsvcs.com.xml
		- ATG_Web_Commerce.xml
		- Eloqua.xml
		- Estara.com.xml
		- Java.net.xml
		- Linksys.xml
		- MySQL.xml
		- NetBeans.zml
		- RightNow.xml
		- VirtualBox.xml


	CDN buckets:

		- oracle.112.2o7.net

		- sun.edgeboss.net

			- a147.g.akamai.net

		- pressroom.oracle.com.edgekey.net
		- www.oracleimg.com.edgekey.net

		- docs.oracle.com.edgesuite.net

			- a1049.d.akamai.net

		- oraclejapan.presscentre.com

			- japanmediacentre


	Nonfunctional subdomains:

		- isdportal *
		- jdevadf	(dropped)
		- oukc *
		- pressroom	(503, akamai with valid cert)
		- tahiti *

	* Refused


	Problematic domains:

		- oracle.com subdomains:

			- ^			(refused)
			- crmondemand *
			- docs			(works, akamai)
			- japanmediacentre **	(works; mismatched, CN: *.presscentre.com)

		- oracleimg.com *

	* Redirects to http; mismatched, CN: java.sun.com


	Partially covered domains:

		- (www.)oracle.com *
		- docs.oracle.com **
		- (www.)oracleimg.com *

	* ^ → www, some paths redirect to http
	** → akamai, avoiding user-visible paths, rest handled in Oracle-mismatches.xml


	There are probably some data identical across shop and www that could be grabbed for www.


	Fully covered domains:

		- oracle.com subdomains:

			- academy
			- acsportal
			- advancedsupport
			- amr
			- amr-stage
			- apex
			- apexea
			- asktom
			- bi-fusioncrm
			- blogs
			- blogs-stage
			- campus
			- cloud subdomains:

				- ^

				- *.em1:

					- console
					- javaservices
					- login
					- myservices

				- *.us0:

					- data
					- loginpre
					- messaging
					- storage

				- *.us1

					- console
					- javaservices
					- login
					- myservices

			- communities
			- competencycentre
			- conference
			- crm-fusioncrm
			- crmondemand		(→ www)
			- digitalmedia
			- dne
			- download
			- edelivery
			- edelivery-hqdc-test
			- education
			- education-stage
			- emeajobs
			- emeapressoffice
			- etrm
			- fin-fusioncrm

			- forums subdomains:

				- ^
				- cn
				- kr

			- forums-stage subdomains:

				- ^
				- cn
				- kr

			- fusioncrm
			- fusionhelp
			- fusionhelp-stage
			- gcmprm
			- hcm-fusioncrm
			- hs-ws1
			- iacademy
			- ic-fusioncrm
			- ilearning
			- ilearningcontent
			- irecruitment
			- itsp
			- itsp-stage
			- linux
			- login
			- login-stage
			- m
			- medianetwork
			- my
			- myprofile
			- myprofile-mktas
			- oai
			- oss
			- otn
			- partners
			- plmap
			- prc-fusioncrm
			- prj-fusioncrm
			- public-yum
			- scm-fusioncrm
			- search
			- shop
			- solutions
			- stbeehive
			- strtc
			- suppliers
			- support
			- supporthtml
			- updates
			- wfs
			- wikis
			- wikis-stage
			- workforce
			- www-portal-stage
			- www-stage

		- oracleoutsourcing.com subdomains:

			- bi-*
			- crm-*
			- fin-*
			- fs-*
			- hcm-*
			- scm-*
			- ic-*
			- prc-*
			- prj-*


	Observed cookie subdomains:

		- blogs

		- cloud subdomains:

			- ^

			- em1 subdomains:

				- console
				- javaservices
				- login
				- myservices

			- data.us0
			- loginpre.us0

			- us1 subdomains:

				- console
				- login
				- myservices

		- competencycenter
		- crm-fusioncrm
		- .edelivery
		- education
		- fin-fusioncrm
		- fusioncrm
		- hcm-fusioncrm
		- ic-fusioncrm
		- login
		- medianetwork
		- scm-fusioncrm
		- shop
		- solutions
		- wikis
		- www


	Mixed content:

		- Script on medianetwork from www.oracleimg.com *

		- Images, on:

			- medianetwork from sun.edgeboss.net
			- medianetwork from www.oracleimg.com *
			- medianetwork from www.oracleimg.com **

		- Web bugs, on:

			- events from dnn506yrbagrg.cloudfront.net *
			- events from consent.truste.com *
			- medianetwork from www.oracleimg.com *

	* Secured by us
	** Unsecurable, doesn't trip MCB

-->
<ruleset name="Oracle (partial)">

	<target host="oracle.com" />
	<target host="*.oracle.com" />
		<!--exclusion pattern="^http://(docs|isdportal|jdevadf|oukc|pressroom|tahiti)\.oracle\.com/" /-->
		<!--
			Very stingy https support
			most paths redirect to http
							-->
		<exclusion pattern="^http://www\.oracle(?:img)?\.com/(?!(?:\w+/)?assets/|\w+/[^/]+\.(?:css|gif|jpg|js|png)$)"/>
		<!--
			Avoid user-visible paths:
							-->
		<!--exclusion pattern="^http://docs\.oracle\.com/(?!.+/css/|favicon\.ico|.+/graphics/)" /-->
	<target host="oracleimg.com" />
	<target host="www.oracleimg.com" />
	<target host="*.oracleoutsourcing.com" />


	<securecookie host="^(?:\w+|\.edelivery)\.oracle\.com$" name=".+" />
	<!--
		Could we secure any of these safely?
							-->
	<!--securecookie host="^\.oracle\.com$" name="^(ORA_FND_SESSION_CRMAP\.US\.ORACLE\.COM|ORA_FUSION_PREFS|s_eVar21)$" /-->
	<!--
		Tracking cookies
					-->
	<securecookie host="^\.oracle\.com$" name="^(?:gpw_e24|s_(?:cc|nr|sq))$" />


	<rule from="^http://(?:www\.)?oracle(img)?\.com/us/([^/]+)\.(css|gif|jpg|js|png)$"
		to="https://www.oracle$1.com/us/assets/$2.$3" />

	<rule from="^https?://(?:www\.)?oracle(img)?\.com/"
		to="https://www.oracle$1.com/" />

	<!--	Server doesn't drop path:
						-->
	<rule from="^http://crmondemand\.oracle\.com/"
		to="https://www.oracle.com/us/products/applications/crmondemand/index.html" />

	<rule from="^http://(i?academy|acsportal|advancedsupport|amr|amr-stage|apex|apexea|asktom|blogs(?:-stage)?|campus|cloud|\w+\.(?:em1|us0|us1)\.cloud|communities|competencycentre|conference|digitalmedia|dne|download|edelivery(?:-hqdc-test)?|education(?:-stage)?|emeajobs|emeapressoffice|etrm|(?:cn\.|kr\.)?forums(?:-stage)?|(?:bi-|crm-|fin-|[hs]cm-|ic-|pr[cj]-)?fusioncrm|fusionhelp(?:-stage)?|gcmprm|hs-ws1|ilearning(?:content)?|irecruitment|itsp|itsp-stage|linux|login(?:-stage)?|medianetwork|my?|myprofile(?:-mktas)?|oai|oss|otn|partners|plmap|public-yum|search|shop|solutions|stbeehive|strtc|suppliers|support(?:html)?|updates|wfs|wikis(?:-stage)?|workforce|www(?:-portal)?-stage)\.oracle\.com/"
		to="https://$1.oracle.com/" />

	<rule from="^http://docs\.oracle\.com/(?=favicon\.ico|.+/(?:cs|graphic)s/)"
		to="https://a248.e.akamai.net/f/1049/1606/6m/docs.oracle.com/" />

	<rule from="^http://(bi|crm|fin|fs|[hs]cm|ic|pr[cj])-(\w+)\.oracleoutsourcing\.com/"
		to="https://$1-$2.oracleoutsourcing.com/" />

</ruleset>
