Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bugfix/allow mixed content #1867

Closed
wants to merge 3 commits into from
Closed

Conversation

rickycodes
Copy link
Member

Description

I noticed recently that we don't allow for mixed content in the browser:

image

This is contrary to how browsers typically handle mixed content, for example on desktop the image loads fine for me (with a warning) in Firefox:

image

the following changes allow for mixed content in our webview so we can load http assets when a site is https:

image

Leaving this as a Draft to facilitate a discussion (also because this includes #1864).

There could be reasons why we might not want to do this, but we should ideally function like other browsers do? thoughts?

Checklist

  • There is a related GitHub issue
  • Tests are included if applicable
  • Any added code is fully documented

Issue

Resolves #???

@@ -4,5 +4,5 @@

<uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW"/>

<application android:usesCleartextTraffic="true" tools:targetApi="28" tools:ignore="GoogleAppIndexingWarning" />
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It doesn't appear we actually need this here since we're setting it in <network-security-config> in react_native_config.xml

initializeFlipper(this, getReactNativeHost().getReactInstanceManager());
RNBranchModule.getAutoInstance(this);
if (BuildConfig.DEBUG) {
WebView.setWebContentsDebuggingEnabled(true);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is needed to debug the WebView for android

@rickycodes rickycodes added the needs-dev-review PR needs reviews from other engineers (in order to receive required approvals) label Oct 9, 2020
@rickycodes
Copy link
Member Author

closing for now

@rickycodes rickycodes closed this Oct 19, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-dev-review PR needs reviews from other engineers (in order to receive required approvals)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant