<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <defaultDocument>
            <files>
                <add value="products.asp" />
            </files>
        </defaultDocument>
        <httpErrors errorMode="DetailedLocalOnly">
            <remove statusCode="404" subStatusCode="-1" />
            <error statusCode="404" prefixLanguageFilePath="" path="/products.asp?page=404" responseMode="ExecuteURL" />
        </httpErrors>
        <rewrite>
            <rules>
                <rule name="Redirect non-www to www" stopProcessing="true">
                  <match url=".*" />
                  <conditions>
                    <add input="{HTTP_HOST}" pattern="^www\.(.*)$" negate="true" />
                  </conditions>
                  <action type="Redirect" url="https://www.{HTTP_HOST}/{R:0}" redirectType="Permanent" />
                </rule>     
                <rule name="HTTP to HTTPS redirect" stopProcessing="true">
                  <match url="(.*)" />
                  <conditions>
                    <add input="{HTTPS}" pattern="off" ignoreCase="true" />
                  </conditions>
                  <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
                </rule>    
                <rule name="Rewrite sitemap.xml to google-sitemap.asp" patternSyntax="ExactMatch" stopProcessing="true">
                    <match url="sitemap.xml" />
                    <action type="Rewrite" url="google-sitemap.asp" appendQueryString="false" />
                </rule>
                <rule name="Rewrite sitemap.htm to products.asp?page=sitemap" patternSyntax="ExactMatch" stopProcessing="true">
                    <match url="sitemap.htm" />
                    <action type="Rewrite" url="products.asp?page=sitemap" appendQueryString="false" />
                </rule>
                <rule name="Redirect RCMF slash s (1)" stopProcessing="true">                  
                    <match url="^s/(.*)$" ignoreCase="false" />
                    <action type="Redirect" redirectType="Permanent" url="http://www.hyperflight.co.uk/{R:1}" />
                </rule>                 
                <rule name="Redirect RCMF slash s (2)" patternSyntax="ExactMatch" stopProcessing="true">                  
                    <match url="s" ignoreCase="false" />
                    <action type="Redirect" redirectType="Permanent" url="http://www.hyperflight.co.uk" />
                </rule> 
                <rule name="Rewrite for callback from Payzone" patternSyntax="ExactMatch" stopProcessing="true">
                    <match url="checkout/callback/payzone" />
                    <action type="Redirect" url="products.asp?cmd=checkout&amp;stage=co&amp;pt=PAYZONE" redirectType="Temporary" />
                </rule>
            </rules>
            <outboundRules>
                <rule name="AddSameSiteCookieFlag">
                    <match serverVariable="RESPONSE_Set-Cookie" pattern="^(.*)(ASPSESSIONID[A-Z]+|CurrencyCode|DeliveryCountry)(=.*)$" />
                    <action type="Rewrite" value="{R:0};SameSite=None" />
                </rule>
            </outboundRules>
        </rewrite>
        <httpProtocol>
            <customHeaders>
                <add name="X-Content-Type-Options" value="nosniff" />
                <!-- (SS,7/11/25) Set exact Cache-Control for PCI scan
                <remove name="Cache-Control" />
                <add name="Cache-Control" value="max-age=0, must-revalidate, no-cache, no-store, private" />
                -->                
            </customHeaders>
        </httpProtocol>
    </system.webServer>
    <system.web>
        <httpCookies httpOnlyCookies="true" />
    </system.web>
</configuration>