<?xml version="1.0" encoding="UTF-8"?>

	<!--
	This test file exemplifies an add-header rule.

	Protection #1: Any response for a resource will contain a header "FOO" with
	               a value "BAR".

	Exception #1:  Any request for /marketing/* will not have any such header
	               returned.
	-->

<policy>

	<settings>
		<mode>redirect</mode>
		<error-handling>
			<default-redirect-page>/security/error.jsp</default-redirect-page>
			<block-status>403</block-status>
		</error-handling>
	</settings>
	
	<outbound-rules>
		<add-header name="FOO" value="BAR" path="/.*">
			<path-exception type="regex">/marketing/.*</path-exception>
		</add-header>
	</outbound-rules>
	
</policy>