ProxySG Content Policy Language Guide
138
//host:port
//host:port/path_query
//host/path_query
host
host:port
host:port/path_query
host/path_query
/path_query
•domain_suffix_pattern—A URL pattern that includes a domain suffix, as a minimum, using
the following syntax:
scheme://domain_suffix:port/path
Accepted domain suffix patterns include the following:
scheme://domain_suffix
scheme://domain_suffix:port
scheme://domain_suffix:port/path_query
scheme://domain_suffix/path_query
//domain_suffix
//domain_suffix:port
//domain_suffix:port/path_query
//domain_suffix/path_query
domain_suffix
domain_suffix:port
domain_suffix:port/path_query
domain_suffix/path_query
•url_scheme—One of http, https, ftp, mms, rtsp, tcp, aol-im, msn-im, or yahoo-im.
The request URL has the scheme https only in the case of SSL termination. A request URL with
the scheme tcp only has a host and a port, and occurs in two cases: when a connection is made to
a TCP tunnel service port, and when the CONNECT method is used in an explicitly proxied
HTTP request. For example, when the Web browser has an explicit HTTP proxy and the user
requests an HTTPS URL, the browser creates a TCP tunnel using the CONNECT method.
•host—A domain name or IP address. Host names must be complete; for example,
url=http://www fails to match a URL such as http://www.example.com. This use of a complete
host instead of a domain_suffix (such as example.com) indicates the difference between the url=
and url.domain= conditions.
•domain_suffix—A pattern which matches either a complete domain name or is a suffix of the
domain name, respecting component boundaries. An IP address is not allowed. This use of a
domain_suffix pattern instead of a complete host name marks the difference between the
url.domain= and url= conditions.
•port—A port number, between 1 and 65535.
•path_query—The path_query portion of a URL is the string beginning with ‘/’ that follows the
host and port, and precedes any URL fragment. A path_query pattern is a string beginning with
a ‘/’ that matches the beginning of the path_query.
•filename_extension—A string representing a filename extension to be tested, optionally
preceded by a period (.). A quoted empty string (url.extension=””) matches URLs that do not