<!--
	Insecure cookies are set for these hosts:

		- protected.fscs.org.uk


	Mixed content:

		- css on protected from fonts.googleapis.com *

	* Secured by us

-->
<ruleset name="FSCS.org.uk (partial)">

	<target host="protected.fscs.org.uk" />

		<!--	Redirects to http:
						-->
		<!--exclusion pattern="^http://www\.fscs\.org\.uk/$" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^protected\.fscs\.org\.uk$" name="^(?:ASP\.NET_SessionId|X-Mapping-\w+)$" /-->

	<securecookie host="^\." name="^_gat?$" />
	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
