10dollar.ca.xml

<!--
	Insecure cookies are set for these hosts: ᶜ

		- 10dollar.ca
		- www.10dollar.ca

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="10 Dollar.ca">

	<target host="10dollar.ca" />
	<target host="www.10dollar.ca" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?10dollar\.ca$" name="^(?:AWSELB$|PHPSESSID)" /-->

	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>