armistace/resbuilder_app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: enforce HTTPS via network security config

Browse Source 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Andrew Ridgway 2026-08-04 23:14:12 +10:00
parent 43d1a6013b
commit 1333db5d1d
Signed by: armistace
GPG Key ID: C8D9EAC514B47EF1
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
app/src/main/AndroidManifest.xml
View File

@ -11,6 +11,7 @@
android:fullBackupContent="@xml/backup_rules" android:fullBackupContent="@xml/backup_rules"
android:icon="@mipmap/ic_launcher" android:icon="@mipmap/ic_launcher"
android:label="@string/app_name" android:label="@string/app_name"
android:networkSecurityConfig="@xml/network_security_config"
android:roundIcon="@mipmap/ic_launcher_round" android:roundIcon="@mipmap/ic_launcher_round"
android:supportsRtl="true" android:supportsRtl="true"
android:theme="@style/Theme.ResBuilder" android:theme="@style/Theme.ResBuilder"

8
app/src/main/res/xml/network_security_config.xml Normal file
View File

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<!-- Enforce HTTPS for the backend API domain. Cleartext is disallowed. -->
<domain-config cleartextTrafficPermitted="false">
<domain includeSubdomains="false">resume.aridgwayweb.com</domain>
</domain-config>
<base-config cleartextTrafficPermitted="false" />
</network-security-config>