cleartext traffic? about oss-weather HOT 8 CLOSED

@IzzySoft i think it me who did that out of simplicity. It is done through android:networkSecurityConfig. Will fix it

from oss-weather.

@IzzySoft i just a published a new version disabling clear traffic and only accepting hosts i use.
There was no good reason ;)

from oss-weather.

@IzzySoft might have found the reason (dependency adding it). Could you trigger a check on the latest release i just made?
Thanks

from oss-weather.

Done – and done 🤩 Thanks, that fixed it! Closing then.

from oss-weather.

Thanks! If you do not need any non-SSL access (i.e. no http:// , just https://), it's better to remove it and thus make cleartext traffic unavailable. If there's a good reason (like a media player accessing local resources – or in your case, maybe communicating with local "Automation Servers" collecting weather information, as e.g. FHEM can do), that's of course something different – in that case I'd put the flag on allow for your app to get rid of the warnings (it's just warnings, no alerts).

from oss-weather.

I've just manually triggered an update – and must disappont you:

com.akylas.weather: 1.8.0.81/android/github/1.8.2/83, https://github.com/Akylas/oss-weather/releases: https://github.com/Akylas/oss-weather/releases/download/android/github/1.8.2/83/app-arm64-v8a-release.apk
- Grabbing update for com.akylas.weather: OK
- Checking 'repo/com.akylas.weather_83.apk' for libraries and malware …
- Checking the app's AndroidManifest.xml …
! repo/com.akylas.weather_83.apk declares flags: usesCleartextTraffic

It's still there.

from oss-weather.

@IzzySoft sorry must have missed something :(

from oss-weather.

Happens. Just let me know when I shall re-check.

from oss-weather.