From 9b2a5f2963c71f96ac7ccafcf0b9a35a89e51956 Mon Sep 17 00:00:00 2001
From: Greg Price <greg@zulip.com>
Date: Mon, 13 May 2024 19:52:13 -0700
Subject: [PATCH] android: Trust user-supplied CAs, take 2

The previous attempt at this (cffb112fd, #474) set the configuration
used by the HTTP implementation from the Android SDK, and by some
third-party HTTP implementations.  But in the bulk of the app's code,
we use the HTTP implementation from the Dart standard library, and
by default that does not consult the Android configuration.

Happily, Flutter has an opt-in feature to apply the same configuration
to the Dart standard library:
  https://chat.zulip.org/#narrow/stream/48-mobile/topic/flutter.3A.20user-added.20certs/near/1716845

So use that.

Fixes: #461
---
 android/app/src/main/AndroidManifest.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index b65a33a68a..eeb9983a7e 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -38,6 +38,9 @@
                 <data android:scheme="zulip" android:host="login" />
             </intent-filter>
         </activity>
+        <meta-data
+            android:name="io.flutter.network-policy"
+            android:resource="@xml/network_security_config" />
         <!-- Don't delete the meta-data below.
              This is used by the Flutter tool to generate GeneratedPluginRegistrant.java -->
         <meta-data