<!--
	Other BPS rulesets:

		- bpsshop.org.uk.xml


	Nonfunctional hosts in *bps.org.uk:

		- cpd ⁴
		- psychsource ʳ
		- www ʰ
		- www1 ᵃ

	⁴ 404
	ᵃ Shows another domain
	ʰ Redirects to http
	ʳ Refused


	Insecure cookies are set for these domains and hosts: ᶜ

		- .bps.org.uk
		- login2.bps.org.uk
		- .shop.bps.org.uk

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="BPS.org.uk (partial)">

	<target host="beta.bps.org.uk"/>
	<target host="digest.bps.org.uk"/>
	<target host="login2.bps.org.uk"/>
	<target host="shop.bps.org.uk"/>


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.bps\.org\.uk$" name="^EU_COMPLIANCE_NOTICE_GIVEN$" /-->
	<!--securecookie host="^login2\.bps\.org\.uk$" name="^(?:CFID|CFTOKEN|TESTBPSLOGIN)$" /-->
	<!--securecookie host="^\.shop\.bps\.org\.uk$" name="^frontend$" /-->

	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
