Allow pinned self-signed TLS for private IPv4 ranges on iOS 17+

2026-09-12 15:33:17 +03:00
parent f8de824752
commit a17a7f8027
5 changed files with 55 additions and 9 deletions
@@ -25,7 +25,11 @@ referenced = set(re.findall(r'"([A-F0-9]{24})"', project))
 assert defined == referenced, "Project has dangling object references."
 info = plistlib.loads(generated[2].read_bytes())
 assert info["NSLocalNetworkUsageDescription"]
-assert info["NSAppTransportSecurity"] == {"NSAllowsLocalNetworking": True}
+assert info["NSAppTransportSecurity"] == {
+    "NSAllowsLocalNetworking": True,
+    "NSExceptionDomains": {network: {"NSExceptionAllowsInsecureHTTPLoads": True}
+                           for network in ("10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16")},
+}
 ET.parse(generated[1])
 fixture = json.loads((root / "MusicBridgeTests/state-v1.json").read_text(encoding="utf-8"))
 assert fixture["protocolVersion"] == 1 and fixture["positionSeconds"] == 42.5