<!--
	Insecure cookies are set for these hosts: ᶜ

		- developer.actor.im

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Actor.im">

	<target host="actor.im" />
	<target host="app.actor.im" />
	<target host="developer.actor.im" />
	<target host="www.actor.im" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^developer\.actor\.im$" name="^(?:XSRF-TOKEN|connect\.sid)$" /-->

	<securecookie host="." name="^optimizely" />
	<securecookie host="^\w" name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
