claude-usage-widget/app/src/main/res/xml/network_security_config.xml at a95b05dadaab4c59ba89ba93b170d7a0b1f94de2 - claude-usage-widget - Gitea: Git with a cup of tea

amir/claude-usage-widget

Files

T

amir 6934017519 security: restrict network to system CAs, tighten WebView capabilities; v1.9

- AndroidManifest: add networkSecurityConfig to explicitly trust only system
  CAs, preventing user-installed CA cert MITM attacks on claude.ai sessions
- LoginActivity: set javaScriptCanOpenWindowsAutomatically=false (not needed
  for claude.ai login) and databaseEnabled=false (deprecated WebSQL)
- build.gradle.kts: enable buildConfig generation (required for
  BuildConfig.DEBUG guards already used in UsageRepository)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-27 20:00:01 +00:00

9 lines

254 B

XML

Raw Blame History

 <?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
     <base-config cleartextTrafficPermitted="false">
         <trust-anchors>
             <certificates src="system" />
         </trust-anchors>
     </base-config>
 </network-security-config>