<!--
	Insecure cookies are set for these domains and hosts: ᶜ

		- opendemocracy.net
		- .opendemocracy.net
		- www.opendemocracy.net

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="openDemocracy.net">

	<target host="opendemocracy.net" />
	<target host="cdn.opendemocracy.net" />
	<target host="www.opendemocracy.net" />

		<test url="http://cdn.opendemocracy.net/sites/all/themes/od960/styles/donate.css" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(www\.)?opendemocracy\.net$" name="^poppester$" /-->
	<!--securecookie host="^\.opendemocracy\.net$" name="^SESS[\da-f]{32}$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
