From 8b68588fddfdeaa5a0b39e5792a7d3bd60dbd059 Mon Sep 17 00:00:00 2001
From: M66B <M66B@users.noreply.github.com>
Date: Sun, 12 Jul 2026 08:04:20 +0200
Subject: [PATCH] Enable CT for non-play builds

---
 app/src/debug/AndroidManifest.xml                   |  5 +++--
 app/src/fdroid/AndroidManifest.xml                  |  5 +++--
 app/src/github/AndroidManifest.xml                  |  5 +++--
 app/src/large/AndroidManifest.xml                   |  5 +++--
 app/src/main/res/xml/network_security_config_ct.xml | 12 ++++++++++++
 5 files changed, 24 insertions(+), 8 deletions(-)
 create mode 100644 app/src/main/res/xml/network_security_config_ct.xml

diff --git a/app/src/debug/AndroidManifest.xml b/app/src/debug/AndroidManifest.xml
index 184e59b1d7..4c9e872810 100644
--- a/app/src/debug/AndroidManifest.xml
+++ b/app/src/debug/AndroidManifest.xml
@@ -133,13 +133,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->
diff --git a/app/src/fdroid/AndroidManifest.xml b/app/src/fdroid/AndroidManifest.xml
index 9c2fe721e3..d24d9af5c3 100644
--- a/app/src/fdroid/AndroidManifest.xml
+++ b/app/src/fdroid/AndroidManifest.xml
@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->
diff --git a/app/src/github/AndroidManifest.xml b/app/src/github/AndroidManifest.xml
index 955d72aee9..30d5cea8f3 100644
--- a/app/src/github/AndroidManifest.xml
+++ b/app/src/github/AndroidManifest.xml
@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->
diff --git a/app/src/large/AndroidManifest.xml b/app/src/large/AndroidManifest.xml
index 955d72aee9..30d5cea8f3 100644
--- a/app/src/large/AndroidManifest.xml
+++ b/app/src/large/AndroidManifest.xml
@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->
diff --git a/app/src/main/res/xml/network_security_config_ct.xml b/app/src/main/res/xml/network_security_config_ct.xml
new file mode 100644
index 0000000000..18bec682de
--- /dev/null
+++ b/app/src/main/res/xml/network_security_config_ct.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config xmlns:tools="http://schemas.android.com/tools"
+    tools:ignore="InsecureBaseConfiguration,AcceptsUserCertificates">
+    <!-- https://developer.android.com/training/articles/security-config -->
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+        <certificateTransparency enabled="true" />
+    </base-config>
+</network-security-config>