<!--
	For other Amazon coverage, see Amazon.xml.


	Insecure cookies are set for these domains: ᶜ

		- .amazon.com.br

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Amazon.com.br">

	<target host="amazon.com.br" />
	<target host="associados.amazon.com.br" />
	<target host="ler.amazon.com.br" />

		<!--	Amazon has a history of breaking us soon after
			adding rulesets, so these are here to detect that.
									-->
		<test url="http://www.amazon.com.br/Hoplite-Olympian-Book-1-English-ebook/dp/B017AEDCC6" />
		<test url="http://www.amazon.com.br/b?node=11414082011" />
		<test url="http://www.amazon.com.br/gp/bestsellers" />
		<test url="http://www.amazon.com.br/gp/product/8535927220" />
		<test url="http://www.amazon.com.br/review/top-reviewers" />
		<test url="http://www.amazon.com.br/s/?ie=UTF8&amp;text=Morris+Fenris&amp;search-alias=digital-text&amp;field-author=Morris+Fenris&amp;sort=relevancerank" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.amazon\.com\.br$" name="^(?:lc-acbbr|session-id|session-id-time|ubid-acbbr|x-wl-uid)$" /-->

	<securecookie host=".+" name="^aps-trtmnt$" />
	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
