-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Conversation
<target host="www4d.wolframalpha.com" /> | ||
<target host="www4f.wolframalpha.com" /> | ||
<target host="www5a.wolframalpha.com" /> | ||
<target host="www5b.wolframalpha.com" /> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These targets are redundant to the wildcard. Please transform them into test urls.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The wildcard regex only covers ^http://(www[0-9][0-9]\.)?wolframalpha\.com/
. Wolfram Alpha does not have HTTPS support on all subdomains, and hence replacing these with test urls would require the list to also be compacted into the regex, a practice that to my understanding is explicitly discouraged (?). It's not an ideal overlap, but this PR cuts the number of Wolfram rulesets in the whitelist from 3 to 1.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This ruleset contains <target host="*.wolframalpha.com" />
and <rule from="^http:" to="https:" />
so it will rewrite anything to https. But you also listed some explicit targets like www5b.wolframalpha.com
and special rewrites.
This is confusing and I think it does not behave like you planned.
So I would list all targets, keep the generic redirect and remove the wildcard target, or use a wildcard target with specific redirect rules and test urls.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it does not behave like you planned.
You are very correct, such a rule would redirect all subdomains to HTTPS indiscriminately. Scarily, that seems to have also been the behavior of the previous ruleset, and probably explains why I copied it without thinking.
- volunteer (sha1) | ||
- www-cn (sha1) | ||
- www-tw (sha1) | ||
- www[0-9][0-9] (http only) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please group by error type and be more precise.
@J0WI I feel like my comments frequently fail your expectations. Is there a checklist somewhere I can start running through, or is it mostly just experience? |
We have our CONTRIBUTING.md and some projects like #9906 |
LGTM now, Thanks! |
No description provided.