Skip to content

[webview_flutter] Remove usesCleartextTraffic#11124

Merged
auto-submit[bot] merged 9 commits intoflutter:mainfrom
mboetger:webview_flutter_remove_usesCleartextTraffic
Feb 26, 2026
Merged

[webview_flutter] Remove usesCleartextTraffic#11124
auto-submit[bot] merged 9 commits intoflutter:mainfrom
mboetger:webview_flutter_remove_usesCleartextTraffic

Conversation

@mboetger
Copy link
Contributor

@mboetger mboetger commented Feb 25, 2026

Removes deprecated usesCleartextTraffic.

Addresses: flutter/flutter#182553

Pre-Review Checklist

  • I read the [Contributor Guide] and followed the process outlined there for submitting PRs.
  • I read the [Tree Hygiene] page, which explains my responsibilities.
  • I read and followed the [relevant style guides] and ran [the auto-formatter].
  • I signed the [CLA].
  • The title of the PR starts with the name of the package surrounded by square brackets, e.g. [shared_preferences]
  • I [linked to at least one issue that this PR fixes] in the description above.
  • I updated pubspec.yaml with an appropriate new version according to the [pub versioning philosophy], or I have commented below to indicate which [version change exemption] this PR falls under[^1].
  • I updated CHANGELOG.md to add a description of the change, [following repository CHANGELOG style], or I have commented below to indicate which [CHANGELOG exemption] this PR falls under[^1].
  • I updated/added any relevant documentation (doc comments with ///).
  • I added new tests to check the change I am making, or I have commented below to indicate which [test exemption] this PR falls under[^1].
  • All existing and new tests are passing.

@flutter-dashboard
Copy link

It looks like this pull request may not have tests. Please make sure to add tests or get an explicit test exemption before merging.

If you are not sure if you need tests, consider this rule of thumb: the purpose of a test is to make sure someone doesn't accidentally revert the fix. Ask yourself, is there anything in your PR that you feel it is important we not accidentally revert back to how it was before your fix?

Reviewers: Read the Tree Hygiene page and make sure this patch meets those guidelines before LGTMing. If you believe this PR qualifies for a test exemption, contact "@test-exemption-reviewer" in the #hackers channel in Discord (don't just cc them here, they won't see it!). The test exemption team is a small volunteer group, so all reviewers should feel empowered to ask for tests, without delegating that responsibility entirely to the test exemption group.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request replaces the deprecated android:usesCleartextTraffic attribute with the modern android:networkSecurityConfig in the example app's Android manifests. This change improves security by explicitly disabling cleartext traffic in release builds, while still allowing it in debug builds for testing purposes. The removal of the unused espresso dev dependency is also a good cleanup. I have one minor suggestion to improve clarity and consistency in the new network security configuration file.

@mboetger mboetger added override: no versioning needed Override the check requiring version bumps for most changes override: no changelog needed Override the check requiring CHANGELOG updates for most changes labels Feb 25, 2026
@mboetger
Copy link
Contributor Author

override changelog/versioning: configuration change

@mboetger mboetger changed the title [weview_flutter] Remove usesCleartextTraffic [webview_flutter] Remove usesCleartextTraffic Feb 25, 2026
@mboetger mboetger added the autosubmit Merge PR when tree becomes green via auto submit App label Feb 26, 2026
Copy link
Collaborator

@stuartmorgan-g stuartmorgan-g left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@auto-submit auto-submit bot merged commit 7026f1a into flutter:main Feb 26, 2026
81 checks passed
engine-flutter-autoroll added a commit to engine-flutter-autoroll/flutter that referenced this pull request Feb 27, 2026
github-merge-queue bot pushed a commit to flutter/flutter that referenced this pull request Feb 27, 2026
flutter/packages@e1d0169...a27d7c5

2026-02-26 [email protected] [pigeon] Tidy GeneratorAdapters to be
const, with getters instead of fields (flutter/packages#11131)
2026-02-26 [email protected] [webview_flutter] Remove
usesCleartextTraffic (flutter/packages#11124)
2026-02-26 [email protected] [pigeon]: Correct comment references in
doc comments (flutter/packages#11129)
2026-02-26 [email protected] [webview_flutter_android] Remove
usesCleartextTraffic (flutter/packages#11122)
2026-02-26 [email protected] Roll Flutter from
dad6f9d to b31548f (39 revisions) (flutter/packages#11116)
2026-02-26 [email protected] [espresso] Remove usesCleartextTraffic
(flutter/packages#11125)
2026-02-26 [email protected] [pigeon] Use function types in order to
avoid dynamic calls (flutter/packages#11130)
2026-02-26 [email protected] [shared_preferences] Revert
androidx.datastore:datastore to 1.1.7 (flutter/packages#11128)

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-packages-flutter-autoroll
Please CC [email protected] on the revert to ensure that a
human
is aware of the problem.

To file a bug in Flutter:
https://github.com/flutter/flutter/issues/new/choose

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
xxxOVALxxx pushed a commit to xxxOVALxxx/flutter that referenced this pull request Mar 10, 2026
…r#183009)

flutter/packages@e1d0169...a27d7c5

2026-02-26 [email protected] [pigeon] Tidy GeneratorAdapters to be
const, with getters instead of fields (flutter/packages#11131)
2026-02-26 [email protected] [webview_flutter] Remove
usesCleartextTraffic (flutter/packages#11124)
2026-02-26 [email protected] [pigeon]: Correct comment references in
doc comments (flutter/packages#11129)
2026-02-26 [email protected] [webview_flutter_android] Remove
usesCleartextTraffic (flutter/packages#11122)
2026-02-26 [email protected] Roll Flutter from
dad6f9d to b31548f (39 revisions) (flutter/packages#11116)
2026-02-26 [email protected] [espresso] Remove usesCleartextTraffic
(flutter/packages#11125)
2026-02-26 [email protected] [pigeon] Use function types in order to
avoid dynamic calls (flutter/packages#11130)
2026-02-26 [email protected] [shared_preferences] Revert
androidx.datastore:datastore to 1.1.7 (flutter/packages#11128)

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-packages-flutter-autoroll
Please CC [email protected] on the revert to ensure that a
human
is aware of the problem.

To file a bug in Flutter:
https://github.com/flutter/flutter/issues/new/choose

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

autosubmit Merge PR when tree becomes green via auto submit App override: no changelog needed Override the check requiring CHANGELOG updates for most changes override: no versioning needed Override the check requiring version bumps for most changes p: webview_flutter platform-android

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants