MetaMask / MetaMask/metamask-mobile

Issue with Android MetaMask HTTP WebView

Open
#9,932 0 comments 0 reactions 0 assignees View on GitHub
external-contributor
Dominant language
TypeScript
Stars
3k
Forks
1.7k
Avg merge
1d 14h
Merged PRs (30d)
669

Description

### What is this about?

I hope this message finds you well.

I am writing to seek your assistance regarding an issue we are encountering with the Android MetaMask browser (version 7.23.0). We are experiencing a problem when attempting to access our website using HTTP, which results in the following error: net::ERR_CLEARTEXT_NOT_PERMITTED.

It appears that this issue is caused by security policies enforced by the Android WebView.

Could you kindly provide guidance on how we can proceed with testing our development site, which is currently using HTTP?

Your assistance on this matter would be greatly appreciated.

Thank you for your time and support.

Best regards,

### Scenario

_No response_

### Design

_No response_

### Technical Details

_No response_

### Threat Modeling Framework

_No response_

### Acceptance Criteria

_No response_

### Stakeholder review needed before the work gets merged

- [X] Engineering (needed in most cases)
- [ ] Design
- [ ] Product
- [ ] QA (automation tests are required to pass before merging PRs but not all changes are covered by automation tests - please review if QA is needed beyond automation tests)
- [X] Security
- [ ] Legal
- [ ] Marketing
- [ ] Management (please specify)
- [ ] Other (please specify)

### References

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the HTTP access failure in the Android MetaMask browser version 7.23.0 and reading the Android WebView cleartext traffic policy. The issue names no repository files or tests; clarify whether the expected outcome is development-site access or guidance, then document a verified resolution for the net::ERR_CLEARTEXT_NOT_PERMITTED error.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, react-native, typescript
Domain
mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.