<!--
	Insecure cookies are set for these hosts: ᶜ

		- www.cbs.mpg.de
		- www.mpg.de

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="MPG.de">

	<target host="mpg.de" />
	<target host="www.cbs.mpg.de" />
	<target host="dsb.mpg.de" />
	<target host="www.dsb.mpg.de" />
	<target host="www.mpg.de" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^www\.(?:cbs\.)?mpg\.de$" name="^_mpg_session_r$" /-->

	<securecookie host="^\w" name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
