Android : Allow Cleartext http

Question

I have a specific requirement wherein I have to block all http requests coming from the app, but there is a particular http url which a library uses which I have to whitelist. Tried setting the network_security_config xml as follows but can't load that http url. Have defined the network_security_config xml inside the manifest file as well.

Url is of the format http://abc.xyz.org

 <?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config cleartextTrafficPermitted="false" />
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">"abc.xyz.org"</domain>
    </domain-config>
</network-security-config>

Is there something I'm missing here.

have a look at this: https://stackoverflow.com/questions/45940861/android-8-cleartext-http-traffic-not-permitted — SebastienRieu, Oct 17 '19 at 12:05

score 3 · Accepted Answer · answered Oct 17 '19 at 12:39

Create xml/network_security_config file with following domain rule.

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <!-- As you want to pass domain-specific traffic -->
    <domain-config cleartextTrafficPermitted="true">
          <!-- Add your specific domain you want to pass without https -->
          <domain includeSubdomains="true">abc.xyz.org</domain>
    </domain-config>
</network-security-config>

Add Network Security Config in Manifest:

<application android:label="your App Name" android:icon="@drawable/icon" android:networkSecurityConfig="@xml/network_security_config">

Not working. This isn't different from the code I wrote, the only difference is I mentioned explicitly which is anyways there by default as false. One more thing, I'm trying to load a webview with this Http URL — vinv, Oct 18 '19 at 09:46

Android : Allow Cleartext http

1 Answers1