-
Notifications
You must be signed in to change notification settings - Fork 1
Description
The Loggly Timber library in the application uses a plaintext HTTP to log messages to this cloud service. Per this discussion on StackOverflow, Android Oreo and above automatically block network requests to unencrypted endpoints with this message: Cleartext HTTP traffic to <endpoint> not permitted.
As a workaround, the <application> tag in the Sermon manifest has an attribute called android:usesCleartextTraffic set to true. In reality, this library should be making an HTTPS call to Loggly so that this workaround is not needed.
The Loggly Timber 1.0.1 library references the underlying Loggly 1.0.3 library, which is not recent enough to include a commit which updates the library's endpoint to HTTPS. This should be worked out with the Loggly development team to either cut a new release on the Loggly library, or update the Loggly Timber library to reference a newer commit on the previously mentioned dependency.