How to solve Android P DownloadManager stopping with "Cleartext HTTP traffic to 127.0.0.1 not permitted"?

Question

I have already defined a custom network security config and included it in my manifest as recommended here

res/xml/network_security_config.xml:

  <?xml version="1.0" encoding="utf-8"?>
  <network-security-config>
  <domain-config cleartextTrafficPermitted="true">
    <domain includeSubdomains="true">127.0.0.1</domain>
    <domain includeSubdomains="true">localhost</domain>
  </domain-config>
  </network-security-config>

and this is in my Android.manifest:

    <application android:icon="@drawable/icon" 
             android:allowBackup="false"
             android:usesCleartextTraffic="true"
             android:networkSecurityConfig="@xml/network_security_config"
             android:label="@string/app_name"
             android:theme="@style/AppTheme"
             android:persistent="true" >

Even with these changes when attempting to communicate via HTTP to 127.0.0.1 I see this in logcat:

08-09 10:50:34.395 30791  3607 D NetworkSecurityConfig: Using Network Security Config from resource network_security_config debugBuild: true
08-09 10:50:34.397 30791  3607 D NetworkSecurityConfig: Using Network Security Config from resource network_security_config debugBuild: true
08-09 10:50:34.401 30791  3607 W DownloadManager: [647] Stop requested with status HTTP_DATA_ERROR: Cleartext HTTP traffic to 127.0.0.1 not permitted
08-09 10:50:34.402 30791  3607 D DownloadManager: [647] Finished with status WAITING_TO_RETRY

EDIT: Update (21 Aug 2018) after "fixing" this issue it seems that a couple of hours after the app is installed the DownloadManager mysteriously stops accepting cleartext HTTP.

I can't explain what's happening. If I reboot the device things work great for a period of time then DownloadManager refuses cleartext again. I'm writing this off as an Android P bug that I hope gets resolved.

EDIT 2: Update (17 Jan 2019) my pixel2 is now running android 9 with a patch from 5 Jan 2019 and I no longer see the issue (so far). I'm guessing this got resolved in some patch since August.

@user3344236 replacing domain-config with base-config solved it! Submit your response as an answer and I'll mark it accepted. — spartygw, Aug 09 '18 at 16:17
Spartygw, in response to "EDIT: Update (21 Aug 2018)" I see the same thing as you. It works, then stops working after a few hours. To temporarily resolve the issue I can force quit the Download Manager app, restart my app and try the download again and it will work. I agree with you. It does seem like a bug in Android P's code in Download Manager. — hokielife, Sep 05 '18 at 22:31
@spartygw I've filed an issue to Google regarding your Update (21 Aug 2018). https://issuetracker.google.com/issues/114143692 — LeonLu, Sep 06 '18 at 18:34
@LeonLu that's great! I wasn't even aware of how to raise this as an issue so I'm thankful that you did. — spartygw, Sep 06 '18 at 23:27

score 48 · Accepted Answer · edited Aug 29 '18 at 04:49

48

Create a XML res/xml/network_security_config.xml

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config cleartextTrafficPermitted="true" />
</network-security-config>

Reference this file in your tag Application, inside AndroidManifest.xml. Like:

android:networkSecurityConfig="@xml/network_security_config"

edited Aug 29 '18 at 04:49

pedrofsn

326
2
15

answered Aug 10 '18 at 11:41

ares777

3,590
1
22
23

Are you sure that's right? shouldn't it either be a closing tag or />? – John Smith Aug 24 '18 at 05:49
1

As you can already know the structure is XML and closing tag is standardized as – ares777 Aug 24 '18 at 09:41
Thanks for the lesson on closing tags! Now remove the trailing / from < base-config cleartextTrafficPermitted="true" / > ;) – John Smith Aug 24 '18 at 20:40
2

No need because is not a node John Smith :)) the usual html closing is used also. Please read again the link. – ares777 Aug 25 '18 at 10:49
1

After spending so many ways the clear text communication problem was resolved by using above code. Thank you very much.@user3344236 – Loganathan Oct 07 '18 at 08:00
SOmehow it does not work for me, Any idea If there is something I need to add? – Jalpesh Feb 28 '19 at 13:35
@Jalpesh For me too. – isabsent Mar 22 '19 at 12:54
Thanks a lot @user3344236 – Jaydeep Kataria Sep 11 '19 at 21:16
If we set cleartextTrafficPermitted to true for base-config, aren't we defeating the purpose of network security policy? I mean every HTTP will be accessed with this configuration. – Danish Ansari Nov 04 '19 at 11:13
How can we allow only our website for downloading files? – Danish Ansari Nov 04 '19 at 11:16
Not related to topic, but you can make rules with SSL pinning and allowed domains. – ares777 Nov 05 '19 at 08:15

score 0 · Answer 2 · answered Jun 03 '21 at 02:48

0

Open manifest

Add android:usesCleartextTraffic="true"

answered Jun 03 '21 at 02:48

Herbert

75
8

score -1 · Answer 3 · answered Jun 09 '20 at 08:57

-1

Replace the BASE_URL protocol from http://... to https://

answered Jun 09 '20 at 08:57

Victor Kabata

13
6

Please explain why thi replacement can answer to the question – Sfili_81 Jun 09 '20 at 09:43

How to solve Android P DownloadManager stopping with "Cleartext HTTP traffic to 127.0.0.1 not permitted"?

3 Answers3

Linked