<!--
	Insecure cookies are set for these hosts: ᶜ

		- ultrabug.fr
		- www.ultrabug.fr

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- css on www from www ˢ

		- Images on www, from:

			- www ˢ
			- api.flattr.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Ultrabug.fr (false MCB)" platform="mixedcontent">

	<target host="ultrabug.fr" />
	<target host="www.ultrabug.fr" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?ultrabug\.fr$" name="^(?:PHPSESSID|start|startBAK)$" /-->

	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
