<!--
	Nonfunctional hosts in *oxfam.org.uk:

		- fundraising ʳ
		- policy-practice ʰ
		- shelflife ᵈ

	ᵈ Dropped
	ʰ Redirects to http
	ʳ Refused


	Problematic hosts in *oxfam.org.uk:

		- ict4d ᵐ

	ᵐ Mismatched


	Insecure cookies are set for these domains and hosts: ᶜ

		- .oxfam.org.uk
		- community.oxfam.org.uk
		- donate.oxfam.org.uk
		- ict4d.oxfam.org.uk
		- karl.oxfam.org.uk
		- .karl.oxfam.org.uk

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- Bugs, on:

			- community donate, stand from oxfamgb.122.2o7.net ˢ
			- community from www.facebook.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Oxfam.org.uk (partial)">

	<target host="oxfam.org.uk" />
	<target host="community.oxfam.org.uk" />
	<target host="donate.oxfam.org.uk" />
	<target host="jobs.oxfam.org.uk" />
	<target host="karl.oxfam.org.uk" />
	<target host="media.oxfam.org.uk" />
	<target host="merlin.oxfam.org.uk" />
	<target host="stand.oxfam.org.uk" />
	<target host="www.oxfam.org.uk" />

		<test url="http://media.oxfam.org.uk/images/products/HighStDonated/Carousel/HD_100535985_01.jpg" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.oxfam\.org\.uk$" name="^o_cs_referrer$" /-->
	<!--securecookie host="^community\.oxfam\.org\.uk$" name="^(?:AuthorizationCookie|Telligent\.Evolution-UI)$" /-->
	<!--securecookie host="^donate\.oxfam\.org\.uk$" name="^__RequestVerificationToken$" /-->
	<!--securecookie host="^ict4d\.oxfam\.org\.uk$" name="^DYNSRV$" /-->
	<!--securecookie host="^karl\.oxfam\.org\.uk$" name="^(?:oatmeal|repoze\.browserid|session)$" /-->
	<!--securecookie host="^\.karl\.oxfam\.org\.uk$" name="^oatmeal$" /-->

	<securecookie host="^\." name="^(?:_gat?$|_gat_|o_cs_referrer|s_v)" />
	<securecookie host="^(?!\.oxfam\.org\.uk$)." name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
