<!--
	For other Red Hat coverage, see RedHat.xml.


	Insecure cookies are set for these domains:

		- developer.jboss.org
		- issues.jboss.org

-->
<ruleset name="JBoss.org">

	<target host="jboss.org" />
	<target host="*.jboss.org" />

		<test url="http://community.jboss.org/" />
		<test url="http://design.jboss.org/" />
		<test url="http://developer.jboss.org/" />
		<test url="http://download.jboss.org/" />
		<test url="http://downloads.jboss.org/" />
		<test url="http://docs.jboss.org/" />
		<test url="http://hudson.jboss.org/" />
		<test url="http://issues.jboss.org/" />
		<test url="http://jboss.jboss.org/" />
		<test url="http://jira.jboss.org/" />
		<test url="http://lists.jboss.org/" />
		<test url="http://sso.jboss.org/" />
		<test url="http://static.jboss.org/" />
		<test url="http://wiki.jboss.org/" />
		<test url="http://www.jboss.org/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^issues\.jboss\.org$" name="^(JSESSIONID|atlassian\.xsrf\.token)$" /-->
	<!--securecookie host="^developer\.jboss\.org$" name="(JSESSIONID|jive\.security\.context)$" /-->

	<securecookie host="^(?:.*\.)?jboss\.org$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
