[Sudo Room] add lists, door, explicitly redirect www.
[Pando] disable ruleset, wrong domains in certs
[Tumblr] disable 25.media.tumblr.com
- it returns a cert for a248.e.akamai.net
[Yahoo] news.yahoo.com now covered
Remove onHeadersReceived listener

The onHeadersReceived listener served one purpose:
Secure cookies set via HTTPS (not HTTP, not JS)

This task is already handled by:
- onBeforeSendHeaders (blocking) which should secure cookies
- onCookieChanged (non-blocking) which secures any cookies on create/update

Moreover, the current function is broken:
- We look for a case-sensitive "Set-Cookie," but many servers send only a
lowercase "set-cookie" (e.g. Google, Twitter, ...)
- "; Secure" is frequently not the end of the cookie (old #L192)

By removing this function, here's what happens for different cookie types:

- Set by HTTP
No change, wasn't ever handled by onHeadersReceived

- Set by Javascript
No change, wasn't ever handled by onHeadersReceived

- Set by HTTPS
Now (as before) secured by onCookieChanged (non-blocking, so maybe a tiny
window for a race to steal the cookie, but ...)
Secured by onBeforeSendHeaders (blocking)

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Merge branch 'sudoroom' of github.com:yardenac/https-everywhere into yardenac-sudoroom
Merge pull request #28 from andrewachen/master

[Yahoo] news.yahoo.com now covered
Merge pull request #27 from yardenac/badcerts

Disable some domains with bad cert hostnames
[Tumblr] Correct exclusion pattern
[Tumblr] send 25.media to 31.media
- fdb8a0e6 excluded 25.media entirely, but this much better solution was suggested here: https://lists.eff.org/pipermail/https-everywhere-rules/2013-December/001783.html
[Reddit] Rewrite attempts to hit https:// reddit urls, too.
Merge pull request #30 from yardenac/fixtumblr

[Tumblr] send 25.media to 31.media
Merge pull request #31 from andrewachen/reddit

[Reddit] Rewrite attempts to hit https:// reddit urls, too.
Add exclusion for blog-assets.newrelic.com.

The CN on the cert doesn't match. Cert is for *.netdna-ssl.com.
pfsense.org now supports HTTPS for www and blog subdomains. Update rules accordingly.
Drop broken WashU physicians SSL rule

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
[Stack-Exchange] Add mixedcontent rule for search
Update comments

Old comment bug was fixed a while back in Chrome.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Faster escape from onBeforeRequest when nothing applies

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Don't try to update the URI() object unless needed (rare)

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>