<!--
	Insecure cookies are set for these hosts: ᶜ

		- bitshare.com
		- www.bitshare.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- css from ^bitshare.com ˢ
		- Images from ^bitshare.com ˢ
		- Bug from www.facebook.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="BitShare.com" platform="mixedcontent">

	<target host="bitshare.com" />
	<target host="www.bitshare.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?bitshare\.com$" name="^PHPSESSID$" /-->

	<securecookie host="^\." name="^(?:__cfduid|cf_clearance)$" />
	<securecookie host="^\w" name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
