<!--
	For other Amazon coverage, see Amazon.xml.


	CDN buckets:

		- beautybar.q-assets.com


	^beautybar.com: Refused


	Insecure cookies are set for these domains and hosts: ᶜ

		- .beautybar.com
		- www.beautybar.com

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="BeautyBar.com">

	<!--	Direct rewrites:
				-->
	<target host="www.beautybar.com" />

	<!--	Complications:
				-->
	<target host="beautybar.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.beautybar\.com$" name="^(?:cookie-check|session-id|ubid-main)$" /-->
	<!--securecookie host="^www\.beautybar\.com$" name="^(?:GEO_COUNTRYCODE|GEO_ZIPCODE|VISITOR_ID|cookie-check)$" /-->

	<securecookie host="." name="^aps-trtmnt$" />
	<securecookie host="^\." name="^_ga(?:t?$|t_)" />
	<securecookie host="^\w" name="." />


	<rule from="^http://beautybar\.com/"
		to="https://www.beautybar.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
