← Back to report

Investigate Cleartext (HTTP) traffic permitted

Build 6.6.0 · Scan 2026-10-13T11:36:10.958Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

The manifest permits cleartext (HTTP) traffic. Data sent over plain HTTP can be read or tampered with on the network; modern apps should require HTTPS.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Parsed app configuration

Representative location

AndroidManifest.xml

Recorded match

android:usesCleartextTraffic="true"

Detector rule

manifest

Recorded file locations

• AndroidManifest.xml