<?xml version="1.0" encoding="utf-8"?>
<network-security-config
	xmlns:tools="http://schemas.android.com/tools">
	<!-- Need to allow cleartext traffic for some sources -->
	<base-config
		cleartextTrafficPermitted="true"
		tools:ignore="InsecureBaseConfiguration">
		<trust-anchors>
			<!-- Trust preinstalled CAs -->
			<certificates src="system" />

			<!-- Additionally, trust user added CAs -->
			<certificates
				src="user"
				tools:ignore="AcceptsUserCertificates" />
		</trust-anchors>
	</base-config>
</network-security-config>