WebView showing ERR_CLEARTEXT_NOT_PERMITTED although site is HTTPS [duplicate]

Question

I'm starting to work on an app on Android, so I don't have much. All I have is just a WebView so far. I created the project in Android Studio, and my project got set as an Android InstantApp. I'm not sure why/how, but my guess is that I overlooked an option for it when creating the project.

I was getting an error from the WebView saying net::ERR_CLEARTEXT_NOT_PERMITTED. When I googled the error, I saw that when an app is an InstantApp, WebViews can only load sites that are HTTPS, and cannot load an HTTP site.

The purpose of this app is to be an extremely simple Flash player for only one site. This is to have better performance running a game that requires Flash. This game is at darkorbit.com, which is HTTPS.

MainActivity.java:

package com.tylerr147.darkorbit; import android.content.ComponentName; import android.content.Intent; import android.support.v7.app.AppCompatActivity; import android.os.Bundle; import android.view.View; import android.webkit.WebSettings; import android.webkit.WebView; public class MainActivity extends AppCompatActivity { @Override protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); setContentView(R.layout.activity_main); WebView wv = findViewById(R.id.webView1); wv.loadUrl("https://darkorbit.com/"); wv.setWebViewClient(new CustomWebViewClient()); WebSettings webSettings = wv.getSettings(); webSettings.setJavaScriptEnabled(true); webSettings.setPluginState(WebSettings.PluginState.ON); } }

and CustomWebViewClient.java

package com.tylerr147.darkorbit; import android.webkit.WebView; import android.webkit.WebViewClient; public class CustomWebViewClient extends WebViewClient { @Override public boolean shouldOverrideUrlLoading(WebView view, String url) { view.loadUrl(url); return true; } }

My question: How can I disable my app as an InstantApp, or how can I get this WebView to display the site?

I feel like it's important I mention a few other details too: In the app, where it is showing the WebView, it also says "The webpage at http://darkorbit.com/" could not be loaded because: net::ERR_CLEARTEXT_NOT_PERMITTED

Notice that is says "... site at http://darkorbit.com/ ...", and not "... site at https://darkorbit.com/ ..." even though the string for the URL is hardcoded, and says "https://darkorbit.com/". Also, I am testing the app on an emulator set up as a Google Pixel 2 running Android 9.

Any help would be appreciated. Thank you.

removing android:networkSecurityConfig="@xml/network_security_config" this worked for me. — Rajendra
– Rajendra, Commented Aug 8, 2019 at 11:06
even i removed android:networkSecurityConfig="@xml/network_security_config" and added android:usesCleartextTraffic="true" then its worked for me — kallayya Hiremath
– kallayya Hiremath, Commented Mar 31, 2020 at 7:48
for me the solution simply was to reinstall & rebuild my capacitor app (ionic cap sync). Something went wrong during this process — Felix Olszewski
– Felix Olszewski, Commented Dec 21, 2023 at 8:29

Muhammad Dyas Yaskur · Accepted Answer · 2022-03-29 22:34:33Z

565

Solution:

Add the below line in your application tag:

android:usesCleartextTraffic="true"

As shown below:

<application .... android:usesCleartextTraffic="true" ....>

UPDATE: If you have network security config such as: android:networkSecurityConfig="@xml/network_security_config"

No Need to set clear text traffic to true as shown above, instead use the below code:

<?xml version="1.0" encoding="utf-8"?> <network-security-config> <domain-config cleartextTrafficPermitted="true"> .... .... </domain-config> <base-config cleartextTrafficPermitted="false"/> </network-security-config>

Set the cleartextTrafficPermitted to true

edited Mar 29, 2022 at 22:34

Muhammad Dyas Yaskur

8,34811 gold badges62 silver badges91 bronze badges

answered Oct 8, 2018 at 18:20

Ümañg ßürmån

10.2k4 gold badges26 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

15 Comments

Shani Deshwal Over a year ago

I also developed a Webview template and got same error. And, now it is solved. thanks

Abraham Mathew Over a year ago

this is already there and it's still showing the same error!!!1

kishan verma Over a year ago

Not solve still showing error in android pie

Maciej Beimcik Over a year ago

it does not work with android:networkSecurityConfig set

Luzian Over a year ago

@Miguel check if you have a networkSecurityConfig in your AndroidManifest.xml under <application ...>. If you do, you may either try removing it (if not needed), or change it to allow your domain. This answer may help you too: stackoverflow.com/a/50834600/7850685

|

Gordon · Accepted Answer · 2019-03-14 08:49:25Z

When you call "https://darkorbit.com/" your server figures that it's missing "www" so it redirects the call to "http://www.darkorbit.com/" and then to "https://www.darkorbit.com/", your WebView call is blocked at the first redirection as it's a "http" call. You can call "https://www.darkorbit.com/" instead and it will solve the issue.

Collectives™ on Stack Overflow

WebView showing ERR_CLEARTEXT_NOT_PERMITTED although site is HTTPS [duplicate]

2 Answers 2

15 Comments

2 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

15 Comments

2 Comments

Linked

Related