[tor-bugs] #26764 [Applications/Orbot]: HTTP proxy bug in Orbot 16.0.2-RC-1

[Tor Bug Tracker & Wiki]

#26764: HTTP proxy bug in Orbot 16.0.2-RC-1
--------------------------------+-----------------------
 Reporter:  soren@…             |          Owner:  n8fr8
     Type:  defect              |         Status:  new
 Priority:  Medium              |      Milestone:
Component:  Applications/Orbot  |        Version:
 Severity:  Normal              |     Resolution:
 Keywords:                      |  Actual Points:
Parent ID:                      |         Points:
 Reviewer:                      |        Sponsor:
--------------------------------+-----------------------

Comment (by soren@…):

 Not knowing for sure, but the timing of the bug indicates to me it might
 be related to how Google changed the default permissions for apps handling
 HTTP traffic when they [https://developer.android.com/training/articles
 /security-config#CleartextTrafficPermitted target API 28 or above].
 "Starting with Android 9 (API level 28), cleartext support is disabled by
 default."

 If that is the case, adding the following to the AndroidManifest.xml:

 {{{
 <application
     ...
     android:networkSecurityConfig="@xml/network_security_config >
 }}}
 And creating !`res/xml/network_security_config.xml` with the following
 contents:

 {{{
 <!-- Allow HTTP traffic. -->
 <network-security-config>
   <base-config cleartextTrafficPermitted="true" />
 </network-security-config>
 }}}
 Should resolve the problem.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26764#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online