fix: allow cleartext traffic

[RohitKushvaha01]

No description provided.

[greptile-apps]

Greptile Summary

This PR fixes cleartext HTTP traffic support by adding android:usesCleartextTraffic=\"true\" to both edit-config blocks in config.xml and removing an invalid <domain-config> block from network_security_config.xml that used * as a domain value (wildcards are not supported by Android's NSC, so that block was silently ignored). The <base-config cleartextTrafficPermitted=\"true\"> already present in the NSC file already permits cleartext traffic globally, making the new manifest attribute technically redundant — but the approach is correct and functional.

Confidence Score: 5/5

Safe to merge — the change correctly fixes cleartext traffic and removes a non-functional wildcard domain entry.

All new findings are P2 (redundant attribute). All previously raised concerns (global cleartext scope, multiple application elements) were already discussed in prior threads. The wildcard domain that was removed was never a valid Android NSC pattern, so the functional impact of removing it is zero. The net result is a working cleartext config.

No files require special attention.

Important Files Changed

Filename	Overview
config.xml	Adds android:usesCleartextTraffic="true" to the existing edit-config block and duplicates all application attributes in a second edit-config block targeting app/src/main/AndroidManifest.xml to ensure Cordova applies the settings in both manifest locations.
res/android/xml/network_security_config.xml	Removes the invalid wildcard domain-config block (Android NSC does not support * as a domain value); the existing base-config with cleartextTrafficPermitted="true" already handles cleartext globally.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[HTTP Request] --> B{android:networkSecurityConfig set?}
    B -- Yes --> C[Evaluate network_security_config.xml]
    B -- No --> D[Use android:usesCleartextTraffic attribute]
    C --> E{domain-config match?}
    E -- Yes --> F[Use domain-config cleartextTrafficPermitted]
    E -- No --> G[Use base-config]
    G --> H[cleartextTrafficPermitted=true]
    H --> I[✅ Cleartext Allowed]
    F --> I
    D --> J[usesCleartextTraffic=true]
    J --> I
    style I fill:#90EE90
    style H fill:#90EE90
    style J fill:#lightgray,stroke:#aaa

Loading

_{Reviews (6): Last reviewed commit: "fix: cordova issue" | Re-trigger Greptile}

[RohitKushvaha01]

@greptileai

[github-actions]

Preview Release for this, has been built.

Click here to view that github actions build

[RohitKushvaha01]

@greptileai