datatheorem / TrustKit-Android

Easy SSL pinning validation and reporting for Android.
MIT License
583 stars 87 forks source link

Accessing string resources inside network-security-config #106

Open numandev1 opened 1 year ago

numandev1 commented 1 year ago

Is it possible to use string resources inside android:networkSecurityConfig defined in AndroidManifest.xml?

I have a config file like this:

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <domain-config>
    <domain includeSubdomains="true">mydomain.com</domain>
    <pin-set>
      <pin digest="SHA-256">@string/pin</pin>
      <pin digest="SHA-256">@string/pin_fallback</pin>
    </pin-set>
    <trustkit-config enforcePinning="true" disableDefaultReportUri="true">
    </trustkit-config>
  </domain-config>
</network-security-config>

but my app doesn't seem to detect resources I define in res/values/strings.xml. Hardcoding these strings works just fine though.