Скачать или смотреть Resolving the Cleartext HTTP traffic Error in Android Applications

Learn how to fix the `Cleartext HTTP traffic` error in your Android app, ensuring smooth communication with HTTP URLs.
---
This video is based on the question https://stackoverflow.com/q/67538590/ asked by the user 'ALZ' ( https://stackoverflow.com/u/13591002/ ) and on the answer https://stackoverflow.com/a/67539006/ provided by the user 'CSmith' ( https://stackoverflow.com/u/592144/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: Cleartext HTTP traffic to ... not permitted

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/l...
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
Resolving the Cleartext HTTP traffic Error in Android Applications

Android developers frequently encounter the Cleartext HTTP traffic to ... not permitted error message when trying to connect their applications to a server using an HTTP URL. This issue typically arises from the security features enforced by the Android operating system, which is designed to protect users from potential vulnerabilities associated with unsecured communications.

In this guide, we will explore why this error occurs and provide clear, actionable steps for resolving it, enabling your app to communicate effectively with your desired web servers. Whether it's a local PHP server for testing or a live environment, the following guidance will help you overcome this challenge.

Understanding the Problem

When developing Android applications, you may allow users to input URLs, which could point to various websites or resources. However, if these URLs use HTTP instead of HTTPS, the app may throw an error, preventing the connection. This is due to Android’s tightened security policies, especially following version 9 (Pie), where cleartext traffic (HTTP) is blocked by default.

Common reasons for encountering this error include:

The target server is using HTTP rather than HTTPS.

The application’s security configuration does not permit cleartext traffic.

Misconfiguration in the Android manifests or network security settings.

Step-by-Step Solution

Let’s dive into a simple solution to allow cleartext traffic to your application. Follow these structured steps to update your configuration correctly:

Step 1: Modify Your Android Manifest

Firstly, ensure your AndroidManifest.xml file includes the necessary permissions and attributes. You should already have something like this, but here is a reminder of the key components to include:

[[See Video to Reveal this Text or Code Snippet]]

Key Points:

The android:usesCleartextTraffic="true" attribute explicitly allows cleartext traffic for the application.

Ensure you specify your custom network security configuration XML file.

Step 2: Update Your Network Security Configuration

Next, review your network_security_config.xml file. Initially, you may have it set up correctly, but let’s enhance it to cover your needs adequately. Update it to look like this:

[[See Video to Reveal this Text or Code Snippet]]

Key Points:

By using <base-config>, you are allowing cleartext traffic for all domains unless explicitly restricted elsewhere in your configurations.

This setting is broader and will help ensure that your local server requests succeed without problems.

Step 3: Test Your Configuration

Once you've updated both the Android Manifest and your network security configuration, it's time to test the application. Run your app, and attempt to connect to the local PHP server or any HTTP URL you’re targeting. Ensure your server is running and accessible.

Final Thoughts

The ability for your Android application to connect to HTTP URLs without encountering the Cleartext HTTP traffic error is crucial, especially during the development phase. By correctly configuring your manifest and network security settings, you can successfully maintain necessary communication between your app and external servers.

If you continue to face issues, double-check the URLs being used and ensure that there are no proxy settings or network interruptions that might prevent access. Remember, as you transition from development to production, reconsider your reliance on HTTP and aim to adopt HTTPS for better security practices.

Feel free to share your experiences and additional solutions in the comments below! Happy coding!