[Whonix] Redirect to www (ticket 9647)
[Microsoft] Exclude msdn.microsoft for now (Ticket 10296)
Use find and xargs to avoid 'too many args' error on Mac OS X
Add platform=mixedcontent for boston.com
[Atlantic Media] redirect assets, cdn, ssl to https://cdn
The reported cert/404 problems with cdn seem to be gone.
assets was not previously covered - https://assets is self-signed, but seems to be the same content.
Redirecting to ssl seems to break some images, such as this:
   https://ssl.theatlantic.com/newsroom/img/posts/2013/12/PenGoogle/4b1d41ac0.jpg <-- 404
   https://cdn.theatlantic.com/newsroom/img/posts/2013/12/PenGoogle/4b1d41ac0.jpg <-- works
[UC Santa Cruz] Add cs.soe.ucsc.edu
Port 96630c7 to makexpi.sh
Update README to be more helpful
Move declaration after cache return

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Remove silly global_rulesets

A "global_ruleset" would've been a totally wildcard rule, "*".

There are zero of these in the current code, and if there were, I imagine it'd be an error.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Replace a now empty concat w/ clone

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Rearrange logic order

The exclusion is much more likely.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Set a smaller LRU rule cache size

After some testing, it's super hard to hit 2,000 entries.

We'll play it safer with lower-ram systems and limit this to 1,000 for now.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Add a smaller cache for cookie domains

Useful as this is a hot path that blocks headers.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Tweak ruleset calculation

Stop building unused test rules for the TLD itself (e.g. www.example.*)

Also remove an intermediate varible assignment.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Rearrange cookie test loop to return earlier

For some reason, we were repeatedly testing that dozens of times...

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
Add back in TLD rule for google.*

I think this was matching anyway, but let's be paranoid and keep it here for now.

Signed-off-by: Nick Semenkovich <semenko@alum.mit.edu>
add rule for Arcor Central Login (Web-Mail interface)
use secure cookies for Arcor where possible
three fixes, thanks to diracdeltas