cancel
Showing results for 
Search instead for 
Did you mean: 

Security Vulnerability Test Result: Not enabled Android N's Network Security Configuration feature

Truthveyor
Level 5
After uploading the Oculus Go game build to a Release Channel, I got the following Security Vulnerability Test Result warning:

"The
app has not enabled
Android
N's Network Security Configuration

feature, which forces the use of encryption (HTTPS) for all of the
app's connections. The feature will block most cleartext HTTP traffic
initiated by the app, which helps ensure that all data to and from
the app has a base level of protection at all times."

After some research, here is the solution I've found:

(1)  Create
the file
Assets/Plugins/Android/res/xml/ Assets/Plugins/Android/res/xml/network_security_config.xml


    Put
    in the file:


    <?xml
    version="1.0"
    encoding="utf-8"?>


    <network-security-config>



      <base-config
      cleartextTrafficPermitted="false">


      </base-config>



    </network-security-config>


(2)  In
the AndroidManifest.xml file, put in this line in <application>:

    android:networkSecurityConfig="@xml/network_sec_config"


Example:  

    <application android:networkSecurityConfig="@xml/network_security_config" android:allowBackup="false">


Problem solved.  I hope this helps.

1 REPLY 1

VintageGreen
Level 5

create the file where Assets/Plugins doesn't exist in unreal?