<!--
	Insecure cookies are set for these hosts:

		- onesignal.com
		- documentation.onesignal.com
		- www.onesignal.com

-->
<ruleset name="OneSignal.com">

	<!--	Direct rewrites:
				-->
	<target host="onesignal.com" />
	<target host="www.onesignal.com" />
	<target host="cdn.onesignal.com" />
	<target host="documentation.onesignal.com" />
	<target host="jobs.onesignal.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?onesignal\.com$" name="^_OneSignal_session$" /-->
	<!--securecookie host="^documentation\.onesignal\.com$" name="^(?:XSRF-TOKEN|connect\.sid)$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
