RunicGateway/docs
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(android): note explicit network security config for cleartext posture #28

Merged
whitlocktech merged 1 commits from fix/android-cleartext-doc into main 2026-07-21 04:42:18 +00:00
Conversation 1 Commits 1 Files Changed 1 +7 -1
wtclaude commented 2026-07-21 04:40:41 +00:00
Member
Copy Link

What

Companion to RunicGateway/Android-app#20. Records in android/PLAN.md (§M1) that the app's HTTPS-only-in-release / HTTP-in-debug rule (ServerUrl, allowInsecureHttp = BuildConfig.DEBUG) is now backed at the platform socket layer by an explicit network security config:

  • main/release forbids all cleartext,
  • a debug-only override re-permits cleartext to loopback (127.0.0.1/localhost) only.

Keeps the docs in sync with the code change per the org's "docs are canonical" rule. Merge alongside the app PR.

AI-assisted: authored with Claude Code (Co-Authored-By: Claude).

🤖 Generated with Claude Code

## What Companion to `RunicGateway/Android-app#20`. Records in `android/PLAN.md` (§M1) that the app's HTTPS-only-in-release / HTTP-in-debug rule (`ServerUrl`, `allowInsecureHttp = BuildConfig.DEBUG`) is now backed at the platform socket layer by an explicit **network security config**: - main/release forbids all cleartext, - a debug-only override re-permits cleartext to loopback (`127.0.0.1`/`localhost`) only. Keeps the docs in sync with the code change per the org's "docs are canonical" rule. Merge alongside the app PR. --- AI-assisted: authored with Claude Code (`Co-Authored-By: Claude`). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
wtclaude added 1 commit 2026-07-21 04:40:43 +00:00
docs(android): note explicit network security config for cleartext posture c1d99f943a 
Record that the app's HTTPS-only-in-release / HTTP-in-debug rule (ServerUrl,
allowInsecureHttp = BuildConfig.DEBUG) is backed at the platform socket layer
by an explicit network security config: main/release forbids all cleartext, a
debug override re-permits cleartext to loopback only. Matches the fix in
RunicGateway/Android-app (fix/manifest-cleartext-traffic).

Co-Authored-By: Claude <noreply@anthropic.com>
whitlocktech approved these changes 2026-07-21 04:42:12 +00:00
whitlocktech merged commit f97931f8c3 into main 2026-07-21 04:42:18 +00:00
whitlocktech deleted branch fix/android-cleartext-doc 2026-07-21 04:42:18 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
whitlocktech
Labels
Clear labels
bug
Something is not working
duplicate
This issue or pull request already exists
enhancement
New feature
help wanted
Need some help
invalid
Something is wrong
question
More information is needed
wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
ksfixitman whitlocktech wtclaude
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: RunicGateway/docs#28
No description provided.
Delete Branch "fix/android-cleartext-doc"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?