<!--
	Barnsley Metropolitan Borough Council

	For other UK government coverage, see GOV.UK.xml.


	Nonfunctional hosts in *barnsley.gov.uk:

		- edemocracy ᵃ
		- fsd ʰ
		- new ²
		- wwwapplications ᵇ
		- wwwdev³

	² 200 "404"
	³ 403
	ᵃ Shows another domain
	ᵇ Shows default page
	ʰ Redirects to http


	Problematic hosts in *barnsley.gov.uk:

		- ^ ᵐ
		- consult ᵐ

	ᵐ Mismatched


	Insecure cookies are set for these domains and hosts: ᶜ

		- applications.barnsley.gov.uk
		- applicationstemp.barnsley.gov.uk
		- consult.barnsley.gov.uk
		- education.barnsley.gov.uk
		- .www.barnsley.gov.uk
		- www2.barnsley.gov.uk

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Barnsley.gov.uk (partial)">

	<!--	Direct rewrites:
				-->
	<target host="applications.barnsley.gov.uk" />
	<target host="applicationstemp.barnsley.gov.uk" />
	<target host="education.barnsley.gov.uk" />
	<target host="www.barnsley.gov.uk" />
	<target host="www2.barnsley.gov.uk" />

	<!--	Complications:
				-->
	<target host="barnsley.gov.uk" />
	<target host="consult.barnsley.gov.uk" />

		<!--	Sets cookies without Secure:
							-->
		<!--test url="http://applicationstemp.barnsley.gov.uk/planningexplorer/" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^applications\.barnsley\.gov\.uk$" name="^ASPSESSIONID[A-Z]{8}$" /-->
	<!--securecookie host="^applicationstemp\.barnsley\.gov\.uk$" name="^(?:ASP\.NET_SessionId|FGTServer|MVMSession)$" /-->
	<!--securecookie host="^consult\.barnsley\.gov\.uk$" name="^(?:JSESSION|Server)ID$" /-->
	<!--securecookie host="^education\.barnsley\.gov\.uk$" name="^FGTServer$" /-->
	<!--securecookie host="^\.www\.barnsley\.gov\.uk$" name="^ARRAffinity$" /-->
	<!--securecookie host="^www2\.barnsley\.gov\.uk$" name="^ASP\.NET_SessionId$" /-->

	<securecookie host="^\." name="^_ga(?:t?$|t_)" />
	<securecookie host="^\w" name="." />
	<securecookie host="^\.www\." name="." />


	<rule from="^http://barnsley\.gov\.uk/"
		to="https://www.barnsley.gov.uk/" />

	<rule from="^http://consult\.barnsley\.gov\.uk/"
		to="https://barnsley-consult.objective.co.uk/" />

		<test url="http://consult.barnsley.gov.uk/portal/contact_us" />

	<rule from="^http:"
		to="https:" />

</ruleset>
