HTTPS Mixed content

[Giorgio Maone]

This code means live.com and twitter.com are exempted from the rule (presumably the "comma" separates it out):

Code: Select all

Site ^http://
Accept from .live.com, .twitter.com
Deny from ^https://

1. Do not use commas as site separators, just whitespace
2. Schemes (protocols) are automatically recognized (no need for a regexp)

Code: Select all

Site http:
Accept from .live.com .twitter.com
Deny from https:

This code means nothing is exempt from the rule (I notice I have to put the "full stop" to ensure the code works):

Code: Select all

Site ^http://
Accept from .
Deny from ^https://

You don't need the Accept action there. The following means that any http: request from a https: origin is denied, with no exception.

Code: Select all

Site http:
Deny from https: