v0.0.3-canary.20
Pre-release
Pre-release
·
19 commits
to main
since this release
Summary
Patch release allowing localhost HTTP traffic for local development while maintaining HTTPS-only security for all other domains.
Changes
Android - Network Security Configuration
Problem:
Previous implementation allowed cleartext (HTTP) traffic for all domains in both debug and release builds, creating a security vulnerability.
Solution:
Implemented domain-specific network security configuration that:
- Allows HTTP traffic only for localhost/127.0.0.1 (local development)
- Enforces HTTPS for all other domains
- Applies to both debug and release builds