'NetworkSecurityConfig merger issue for Android Apps when SDKs too, have thier similar config files

As network security config is now understood by all Android devs and its importance, there seems a corner case not much clear about.

Manifest merger fails if project has network-security-config file in any SDK/lib. As a solution to build project you may need to replace lower priority manifest elements; means replace SDK’s network-security-config file with App’s one.

Problem is what about some important domain white listing that third-party SDKs might be using; and they may not share details regarding it (so that at top level app’s config file, we can add it)

Any solution to this or am I missing out anything?



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source