Add #160: Add keep-alive support with +https-inspection.

[privoxy.git] / default.action.master

diff --git a/default.action.master b/default.action.master
index 728753a..64396a4 100644 (file)
--- a/default.action.master
+++ b/default.action.master
@@ -21,14 +21,14 @@
 #                 and enhancements are better placed in user.action,
 #                 the match-all section has been moved to match-all.action.
 #
-#  Copyright   :  Written by and Copyright (C) 2001-2019 the
+#  Copyright   :  Written by and Copyright (C) 2001-2020 the
 #                 Privoxy team. https://www.privoxy.org/
 #
 # Feedback welcome, for details please have a look at:
 # https://www.privoxy.org/user-manual/contact.html
 #
-# The current development version of this file is located:
-# http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/default.action.master
+# The current development version of this file is located at:
+# https://www.privoxy.org/gitweb/?p=privoxy.git;a=blob_plain;f=default.action.master;hb=HEAD
 #
 #############################################################################
 # Syntax
@@ -371,6 +371,14 @@
 #      +hide-user-agent{Privoxy/1.0}
 #    (Don't change the version number from 1.0 - after all, why tell them?)
 #
+# +https-inspection
+#    Filter encrypted requests and responses.
+#    Requires FEATURE_HTTPS_INSPECTION.
+#
+# +ignore-certificate-errors
+#    Ignore certificate errors when the +https-inspection action
+#    is enabled. Requires FEATURE_HTTPS_INSPECTION.
+#
 # +limit-connect{portlist}
 #
 #    By default, i.e. if no limit-connect action applies, Privoxy
@@ -547,6 +555,7 @@ allow-ads   = -block -filter{banners-by-size} -filter{banners-by-link}
 #
 { \
 +change-x-forwarded-for{block} \
++client-header-filter{no-brotli-accepted} \
 +client-header-tagger{css-requests} \
 +client-header-tagger{image-requests} \
 +client-header-tagger{range-requests} \
@@ -561,6 +570,7 @@ standard.Cautious
 #
 { \
 +change-x-forwarded-for{block} \
++client-header-filter{no-brotli-accepted} \
 +client-header-tagger{css-requests} \
 +client-header-tagger{image-requests} \
 +client-header-tagger{range-requests} \
@@ -591,6 +601,7 @@ standard.Medium
 #
 { \
 +change-x-forwarded-for{block} \
++client-header-filter{no-brotli-accepted} \
 +client-header-tagger{css-requests} \
 +client-header-tagger{image-requests} \
 +client-header-tagger{range-requests} \
@@ -2145,6 +2156,11 @@ yandex.ru/.*&retpath=http
 disqus.com/
 # URL = http://www.youtube.com/embed/blafasel?feature=oembed&enablejsapi=1&origin=http://www.example.com&wmode=opaque
 .youtube.com/.*origin=http
+# URL = https://oss-fuzz.com/login?dest=https%3A%2F%2Foss-fuzz.com%2Ftestcase-detail%2F5727799779524608
+#MASTER# REMARKS: Only match based on the host so the test works even without https-inspection enabled.
+oss-fuzz.com/
+# URL = https://sourcepoint.vice.com/mms/choice_select?choice_id=523912&requestUUID=a98ca09e-5c1f-4aa4-b28e-ab5b26150859-1591162630861&href=https%3A%2F%2Fwww.vice.com%2Fen_us%2Farticle%2F7kpb9a%2Fhow-to-protest-racist-violence-instead-of-posting-blackout-tuesday-square
+sourcepoint.vice.com/
 
 {+redirect{s@.*url=@http://@} -block}
 # Sticky Actions = +redirect -block