testRTC / watchRTCSDK-Android

ISC License
1 stars 0 forks source link

Android Network Security Policy Leaking down to SDK Clients #3

Open eldarovich99 opened 1 month ago

eldarovich99 commented 1 month ago

Hello! The library contains it's own networkSecurityConfig. We can replace it on our side, but not sure how it impacts your implementation or we can add it to our dev configs, but not prod, because it contains cleartextTrafficPermitted="true"which is not an option for our prod build. Is it possible to remove or address downstream networkSecurityConfig that is forcing cleartextPermitted?

krunalspearline commented 1 month ago

Hello @eldarovich99,

You can replace with your app configuration on networkSecurityConfig file and we will remove flag cleartextTrafficPermitted on next release. Please let me know if still facing any issue regarding an issue.

Thank you.