<!--
	For other Amazon coverage, see Amazon.xml.


	Insecure cookies are set for these domains: ᶜ

		- .amazon.cn
		- .www.amazon.cn

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Amazon.cn">

	<target host="amazon.cn" />
	<target host="associates.amazon.cn" />
	<target host="daxue.amazon.cn" />
	<target host="fls-cn.amazon.cn" />
	<target host="haimai.amazon.cn" />
	<target host="kaidian.amazon.cn" />
	<target host="mai.amazon.cn" />
	<target host="tui.amazon.cn" />
	<target host="widgets.amazon.cn" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.amazon\.cn$" name="^(?:session-id|session-id-time|session-token|ubid-acbcn|x-wl-uid)$" /-->
	<!--securecookie host="^\.www\.amazon\.cn$" name="^(?:UserPref|at-main|session-id|session-id-time|session-token|ubid-acbcn|x-acncn)$" /-->

	<securecookie host=".+" name="^aps-trtmnt$" />
	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
