App Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure.

Question

Supposedly temporary exceptions can be configured via your app\'s Info.plist file. Following other answers, I added this entry to the info.plist but it does not help (even worse

Answer 1

@SamHeather I tried to post this in Comments, but apparently too long.. This is white listing Facebook domains which is mandatory for the Facebook SDK integration. You can change these of course to fit your needs.

Currently whitelisted are: akamaidhd.net, facebook.com, and fbcdn.net.

You could change these like such for example:

(your domain name) 
                
                    NSIncludesSubdomains
                    
                    NSThirdPartyExceptionRequiresForwardSecrecy
                    
                

Facebook white listing below:

NSAppTransportSecurity

        NSAllowsArbitraryLoads
        
        NSExceptionDomains
        
            akamaihd.net
            
                NSIncludesSubdomains
                
                NSThirdPartyExceptionRequiresForwardSecrecy
                
            
            facebook.com
            
                NSIncludesSubdomains
                
                NSThirdPartyExceptionRequiresForwardSecrecy
                
            
            fbcdn.net
            
                NSIncludesSubdomains
                
                NSThirdPartyExceptionRequiresForwardSecrecy