From 31c464deabb851554a9144700325bc111774b464 Mon Sep 17 00:00:00 2001
From: Hai Zhang <dreaming.in.code.zh@gmail.com>
Date: Wed, 17 Apr 2024 15:32:43 -0700
Subject: [PATCH] Feat: Allow user certificates so that self signed WebDAV can
 work

If someone is able to install a user CA into the system, they could
also just downgrade the WebDAV setting in this app to HTTP anyway.

Bug: #1187
---
 app/src/main/AndroidManifest.xml                |  1 +
 .../main/res/xml/netework_security_config.xml   | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 app/src/main/res/xml/netework_security_config.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index f63c85358..ef2e940b5 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -47,6 +47,7 @@
         android:fullBackupContent="true"
         android:icon="@mipmap/launcher_icon"
         android:label="@string/app_name"
+        android:networkSecurityConfig="@xml/netework_security_config"
         android:requestLegacyExternalStorage="true"
         android:requestRawExternalStorageAccess="true"
         android:resizeableActivity="true"
diff --git a/app/src/main/res/xml/netework_security_config.xml b/app/src/main/res/xml/netework_security_config.xml
new file mode 100644
index 000000000..98be2f909
--- /dev/null
+++ b/app/src/main/res/xml/netework_security_config.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!--
+  ~ Copyright (c) 2024 Hai Zhang <dreaming.in.code.zh@gmail.com>
+  ~ All Rights Reserved.
+  -->
+
+<network-security-config
+    xmlns:tools="http://schemas.android.com/tools"
+    tools:ignore="AcceptsUserCertificates,InsecureBaseConfiguration">
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>