Skip to content

v0.0.3-canary.20

Pre-release
Pre-release

Choose a tag to compare

@mayansharma mayansharma released this 29 Jan 05:53
· 19 commits to main since this release
54f625c

Summary

Patch release allowing localhost HTTP traffic for local development while maintaining HTTPS-only security for all other domains.

Changes

Android - Network Security Configuration

Problem:
Previous implementation allowed cleartext (HTTP) traffic for all domains in both debug and release builds, creating a security vulnerability.

Solution:
Implemented domain-specific network security configuration that:

  • Allows HTTP traffic only for localhost/127.0.0.1 (local development)
  • Enforces HTTPS for all other domains
  • Applies to both debug and release builds