summaryrefslogtreecommitdiff
path: root/app/src/main/res/xml/network_security_config.xml
blob: c569ba1a9bffb79f45de79083bfe104ea946fd5e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<?xml version="1.0" encoding="utf-8"?>
<!--
  Two feeds (webpolicy.org, bit-player.org) are genuinely alive but have no working
  HTTPS at all (confirmed live, not a config mistake, see AppDatabase's v7/v8 migration
  comments for the investigation). Everything else stays cleartext-blocked, same as the
  platform default with no config at all. Deliberately isolated to just this file plus
  the one networkSecurityConfig line in AndroidManifest.xml, so both domains, or this
  whole exception, can be removed cleanly if these feeds are ever dropped instead.
-->
<network-security-config>
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="false">webpolicy.org</domain>
        <domain includeSubdomains="false">bit-player.org</domain>
    </domain-config>
</network-security-config>