From 4b98814a66752656ed1fed04fdb59f3e3d6ac443 Mon Sep 17 00:00:00 2001
From: Matt Boetger <boetger@google.com>
Date: Wed, 25 Feb 2026 15:08:05 -0800
Subject: [PATCH 1/4] remove usesCleartextTraffic

---
 .../example/android/app/src/debug/AndroidManifest.xml       | 2 +-
 .../app/src/debug/res/xml/network_security_config.xml       | 6 ++++++
 .../example/android/app/src/main/AndroidManifest.xml        | 2 +-
 .../app/src/main/res/xml/network_security_config.xml        | 4 ++++
 .../webview_flutter/webview_flutter/example/pubspec.yaml    | 1 -
 5 files changed, 12 insertions(+), 3 deletions(-)
 create mode 100644 packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
 create mode 100644 packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml

diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
index 28792201bc36..0a4ba609e1c2 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
@@ -4,7 +4,7 @@
          to allow setting breakpoints, to provide hot reload, etc.
     -->
     <uses-permission android:name="android.permission.INTERNET"/>
-    <application android:usesCleartextTraffic="true">
+    <application android:networkSecurityConfig="@xml/network_security_config"> 
         <activity
             android:name=".WebViewTestActivity"
             android:launchMode="singleTop"
diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
new file mode 100644
index 000000000000..3032fe019b57
--- /dev/null
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <!-- Cleartext is needed for Espresso testing. -->
+    <base-config cleartextTrafficPermitted="true">
+    </base-config>
+</network-security-config>
diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
index 484b588c8528..98de70aee740 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
@@ -2,7 +2,7 @@
   package="io.flutter.plugins.webviewflutterexample">
 
   <application
-    android:usesCleartextTraffic="true"
+    android:networkSecurityConfig="@xml/network_security_config"
     android:icon="@mipmap/ic_launcher"
     android:label="webview_flutter_example">
     <meta-data
diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml
new file mode 100644
index 000000000000..611595086236
--- /dev/null
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="false" />
+</network-security-config>
diff --git a/packages/webview_flutter/webview_flutter/example/pubspec.yaml b/packages/webview_flutter/webview_flutter/example/pubspec.yaml
index 62227bc18da2..7de3b31b748f 100644
--- a/packages/webview_flutter/webview_flutter/example/pubspec.yaml
+++ b/packages/webview_flutter/webview_flutter/example/pubspec.yaml
@@ -22,7 +22,6 @@ dependencies:
 
 dev_dependencies:
   build_runner: ^2.1.5
-  espresso: ^0.4.0
   flutter_test:
     sdk: flutter
   integration_test:

From 09e1f71f5923575138e020efd6124bb1560f75a4 Mon Sep 17 00:00:00 2001
From: Matt Boetger <boetger@google.com>
Date: Wed, 25 Feb 2026 15:09:40 -0800
Subject: [PATCH 2/4] update comment

---
 .../android/app/src/debug/res/xml/network_security_config.xml   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
index 3032fe019b57..f208da354ad4 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/res/xml/network_security_config.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
-    <!-- Cleartext is needed for Espresso testing. -->
+    <!-- Enable cleartext for debug to allow testing. -->
     <base-config cleartextTrafficPermitted="true">
     </base-config>
 </network-security-config>

From 9bfed836e8f1af35694619da12a578bd91eed0fe Mon Sep 17 00:00:00 2001
From: Matt Boetger <boetger@google.com>
Date: Wed, 25 Feb 2026 15:16:50 -0800
Subject: [PATCH 3/4] add metadata value so flutter respects network security
 config

---
 .../example/android/app/src/debug/AndroidManifest.xml           | 2 ++
 .../example/android/app/src/main/AndroidManifest.xml            | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
index 0a4ba609e1c2..af4ec0b345e3 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/debug/AndroidManifest.xml
@@ -13,5 +13,7 @@
             android:hardwareAccelerated="true"
             android:windowSoftInputMode="adjustResize">
         </activity>
+        <meta-data android:name="io.flutter.network-policy"
+            android:resource="@xml/network_security_config"/>
     </application>
 </manifest>
diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
index 98de70aee740..86df0e6cf0d2 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/main/AndroidManifest.xml
@@ -8,6 +8,8 @@
     <meta-data
         android:name="flutterEmbedding"
         android:value="2" />
+    <meta-data android:name="io.flutter.network-policy"
+        android:resource="@xml/network_security_config" />
     <activity
       android:configChanges="orientation|keyboardHidden|keyboard|screenSize|locale|layoutDirection|fontScale|screenLayout|density|uiMode"
       android:hardwareAccelerated="true"

From 28a7c7fb80959824351519c4a935b03e984ebfd4 Mon Sep 17 00:00:00 2001
From: Matt Boetger <boetger@google.com>
Date: Thu, 26 Feb 2026 09:47:55 -0800
Subject: [PATCH 4/4] move to true for lint error

---
 .../android/app/src/main/res/xml/network_security_config.xml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml b/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml
index 611595086236..2439f15c2cb7 100644
--- a/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml
+++ b/packages/webview_flutter/webview_flutter/example/android/app/src/main/res/xml/network_security_config.xml
@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
-    <base-config cleartextTrafficPermitted="false" />
+    <base-config cleartextTrafficPermitted="true" />
 </network-security-config>