<?xml version="1.0" encoding="UTF-8"?>

	<!--
	This test file exemplifies an enforce-https rule.

	Protection #1: a request of any kind for /foo should be redirected to secure request with 302.
	Exception #1: Static path /index.html
	Exception #2: Pattern path /images/.*
	-->

<policy>

	<settings>
		<mode>redirect</mode>
		<error-handling>
			<default-redirect-page>/security/error.jsp</default-redirect-page>
			<block-status>403</block-status>
		</error-handling>
	</settings>

	<url-rules>
		<enforce-https path="/.*">
			<path-exception>/index.html</path-exception>
			<path-exception type="regex">/images/.*</path-exception>
		</enforce-https>
	</url-rules>

</policy>