<!--
	Enfield Council

	For other UK government coverage, see GOV.UK.xml.


	Nonfunctional hosts in *enfield.gov.uk:

		- adultsocialcaremarketplace ᵃ

	ᵃ Shows another domain


	Problematic hosts in *enfield.gov.uk

		- consult ᵐ

	ᵐ Mismatched


	These altnames do not exist:

		- jobs.enfield.gov.uk


	Insecure cookies are set for these domains and hosts: ᶜ

		- enfield.gov.uk
		- .enfield.gov.uk
		- .enfield.gov.uk
		- auth.enfield.gov.uk
		- .auth.enfield.gov.uk
		- consult.enfield.gov.uk
		- new.enfield.gov.uk
		- .new.enfield.gov.uk
		- .newcg.enfield.gov.uk
		- parentportal.enfield.gov.uk
		- www.enfield.gov.uk
		- .www.enfield.gov.uk

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- Images on (www.)? from www.enfield.gov.uk ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Enfield.gov.uk (partial)">

	<!--	Direct rewrites:
				-->
	<target host="enfield.gov.uk" />
	<target host="auth.enfield.gov.uk" />
	<target host="www.jobs.enfield.gov.uk" />
	<target host="new.enfield.gov.uk" />
	<target host="newcg.enfield.gov.uk" />
	<target host="parentportal.enfield.gov.uk" />
	<target host="ssl.enfield.gov.uk" />
	<target host="www.enfield.gov.uk" />

		<!--	Mixed images:
					-->
		<!--test url="http://www.enfield.gov.uk/site/" /-->

	<!--	Complications:
				-->
	<target host="consult.enfield.gov.uk" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?enfield\.gov\.uk$" name="^PHPSESSID$" /-->
	<!--securecookie host="^\.enfield\.gov\.uk$" name="^TestCookie$" /-->
	<!--securecookie host="^auth\.enfield\.gov\.uk$" name="^__RequestVerificationToken_\w+$" /-->
	<!--securecookie host="^\.(?:auth|new|newcg)\.enfield\.gov\.uk$" name="^ARRAffinity$" /-->
	<!--securecookie host="^consult\.enfield\.gov\.uk$" name="^(?:JSESSION|Server)ID$" /-->
	<!--securecookie host="^new\.enfield\.gov\.uk$" name="^anonprofile$" /-->
	<!--securecookie host="^parentportal\.enfield\.gov\.uk$" name="^MY_SESSION_[\dA-F]+$" /-->
	<!--securecookie host="^www\.enfield\.gov\.uk$" name="^PHPSESSID$" /-->
	<!--securecookie host="^\.www\.enfield\.gov\.uk$" name="^DragDropCookieID$" /-->

	<securecookie host="^(?!\.enfield\.gov\.uk$)." name=".+" />
	<securecookie host="^\." name="^TestCookie$" />


	<rule from="^http://consult\.enfield\.gov\.uk/"
		to="https://enfield-consult.objective.co.uk/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
