34 lines
1.7 KiB
XML
34 lines
1.7 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<network-security-config xmlns:tools="http://schemas.android.com/tools">
|
|
<!-- Ref: https://developer.android.com/training/articles/security-config.html -->
|
|
<!-- By default, do not allow clearText traffic -->
|
|
<base-config cleartextTrafficPermitted="false">
|
|
<trust-anchors>
|
|
<certificates src="system" />
|
|
<certificates
|
|
src="user"
|
|
tools:ignore="AcceptsUserCertificates" />
|
|
</trust-anchors>
|
|
</base-config>
|
|
|
|
<!-- Allow clearText traffic on some specified host -->
|
|
<domain-config cleartextTrafficPermitted="true">
|
|
<!-- Localhost -->
|
|
<domain includeSubdomains="true">localhost</domain>
|
|
<domain includeSubdomains="true">127.0.0.1</domain>
|
|
<!-- Localhost for Android emulator -->
|
|
<domain includeSubdomains="true">10.0.2.2</domain>
|
|
<!-- Onion services -->
|
|
<domain includeSubdomains="true">onion</domain>
|
|
|
|
<!-- Domains that are used for LANs -->
|
|
<!-- These are IANA recognized special use domain names, see https://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.xhtml -->
|
|
<domain includeSubdomains="true">home.arpa</domain>
|
|
<domain includeSubdomains="true">local</domain> <!-- Note this has been reserved for use with mDNS -->
|
|
<domain includeSubdomains="true">test</domain>
|
|
<!-- These are observed in the wild either by convention or RFCs that have not been accepted, and are not currently TLDs -->
|
|
<domain includeSubdomains="true">home</domain>
|
|
<domain includeSubdomains="true">lan</domain>
|
|
<domain includeSubdomains="true">localdomain</domain>
|
|
</domain-config>
|
|
</network-security-config>
|