Feat: Allow user certificates so that self signed WebDAV can work

If someone is able to install a user CA into the system, they could also just downgrade the WebDAV setting in this app to HTTP anyway. Bug: #1187
zhanghai · Apr 17, 2024 · 31c464d · 31c464d
1 parent cdbd9b4
commit 31c464d
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
@@ -47,6 +47,7 @@
         android:fullBackupContent="true"
         android:icon="@mipmap/launcher_icon"
         android:label="@string/app_name"
+        android:networkSecurityConfig="@xml/netework_security_config"
         android:requestLegacyExternalStorage="true"
         android:requestRawExternalStorageAccess="true"
         android:resizeableActivity="true"

diff --git a/app/src/main/res/xml/netework_security_config.xml b/app/src/main/res/xml/netework_security_config.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!--
+  ~ Copyright (c) 2024 Hai Zhang <[email protected]>
+  ~ All Rights Reserved.
+  -->
+
+<network-security-config
+    xmlns:tools="http://schemas.android.com/tools"
+    tools:ignore="AcceptsUserCertificates,InsecureBaseConfiguration">
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>