Skip to content

Commit

Permalink
iOS 9: Allow HTTP downloads (instead of HTTPS) of subject images.
Browse files Browse the repository at this point in the history
To avoid this error in iOS 9:
"
Application Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.
"

See zooniverse/Galaxy-Zoo#228
  • Loading branch information
murraycu committed Sep 24, 2015
1 parent 414cf4b commit a893be9
Showing 1 changed file with 32 additions and 0 deletions.
32 changes: 32 additions & 0 deletions ios-galaxyzoo/Info.plist
Original file line number Diff line number Diff line change
Expand Up @@ -42,5 +42,37 @@
<string>UIInterfaceOrientationLandscapeLeft</string>
<string>UIInterfaceOrientationLandscapeRight</string>
</array>


<!-- Allow use of http (instead of https) for the Amazon AWS S3-hosted subject images.
See https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/
and https://github.com/zooniverse/Galaxy-Zoo/issues/228 -->
<key>NSAppTransportSecurity</key>
<dict>
<key>NSExceptionDomains</key>
<dict>
<key>www.galaxyzoo.org.s3.amazonaws.com</key>

<dict>
<key>NSExceptionAllowsInsecureHTTPLoads</key>
<true/>
<key>NSIncludesSubdomains</key>
<true/>

<!-- In case we start using https for the images, instead of http:
See https://github.com/zooniverse/Galaxy-Zoo/issues/228
<key>NSThirdPartyExceptionMinimumTLSVersion</key>
<string>TLSv1.0</string>
<key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
<false/>
<key>NSIncludesSubdomains</key>
<true/>
-->
</dict>
</dict>
</dict>

</dict>


</plist>

0 comments on commit a893be9

Please sign in to comment.