How to add networkSecurityConfig in AndroidManifest.xml

[isPatcher]

How can add networkSecurityConfig & usesCleartextTraffic entry in AndroidManifest.xml

I want to add res/xml/network_security_config.xml

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
            <certificates src="system" />
            <certificates
                overridePins="true"
                src="user" />
        </trust-anchors>
    </base-config>
    <debug-overrides>
        <trust-anchors>
            <certificates src="system" />
            <certificates
                overridePins="true"
                src="user" />
        </trust-anchors>
    </debug-overrides>
</network-security-config>

I think need adding attribute & name in AndroidManifest.java, but i don't know after how to use this

    int ID_networkSecurityConfig = ObjectsUtil.of(0x01010527);
    int ID_usesCleartextTraffic = ObjectsUtil.of(0x010104ec);

    String NAME_networkSecurityConfig = ObjectsUtil.of("networkSecurityConfig");
    String NAME_usesCleartextTraffic = ObjectsUtil.of("usesCleartextTraffic");

I am patching an APK with dexlib2, can I use it in this with my merge script & or without merge mean (".apk") how do I apply because I am not decompiling the apk

My merge script here - Merger.java

[krotname]

You don't need to add constants to AndroidManifestBlock for this. You can use the raw Android attribute ids and set the manifest value as a resource reference.

The important part is: android:networkSecurityConfig must point to a real @xml/... resource id, not to the string "@xml/network_security_config".

Shape of the patch:

TableBlock table = apkModule.getTableBlock();
PackageBlock pkg = table.pickOne();

String path = "res/xml/network_security_config.xml";
String xml = """
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
            <certificates src="system" />
            <certificates overridePins="true" src="user" />
        </trust-anchors>
    </base-config>
    <debug-overrides>
        <trust-anchors>
            <certificates src="system" />
            <certificates overridePins="true" src="user" />
        </trust-anchors>
    </debug-overrides>
</network-security-config>
""";

apkModule.add(new XMLEncodeSource(
        pkg,
        new XMLStringParserSource(path, xml)
));

Entry xmlEntry = pkg.getOrCreate("", "xml", "network_security_config");
xmlEntry.setValueAsString(path);

AndroidManifestBlock manifest = apkModule.getAndroidManifest();
ResXmlElement app = manifest.getOrCreateApplicationElement();

app.getOrCreateAndroidAttribute("usesCleartextTraffic", 0x010104ec)
        .setValueAsBoolean(true);

app.getOrCreateAndroidAttribute("networkSecurityConfig", 0x01010527)
        .setTypeAndData(ValueType.REFERENCE, xmlEntry.getResourceId());

manifest.refreshFull();

If the XML already exists as a file, use new XMLFileParserSource(path, file) instead of XMLStringParserSource. XMLEncodeSource is useful here because res/xml/*.xml inside an APK should be encoded as binary XML, not added as a plain text file.

[isPatcher]

Thanks it's Working

package com.pairip.xml;

import com.pairip.util.Log;

import com.reandroid.apk.ApkModule;
import com.reandroid.apk.xmlencoder.XMLEncodeSource;
import com.reandroid.arsc.chunk.PackageBlock;
import com.reandroid.arsc.chunk.TableBlock;
import com.reandroid.arsc.chunk.xml.AndroidManifestBlock;
import com.reandroid.arsc.chunk.xml.ResXmlElement;
import com.reandroid.arsc.value.Entry;
import com.reandroid.arsc.value.ValueType;
import com.reandroid.xml.source.XMLStringParserSource;

import java.io.File;
import java.io.InputStream;
import java.io.IOException;
import java.nio.charset.StandardCharsets;

public class XMLPatcher {

    public static void addNSC(ApkModule apkModule) throws IOException {

        TableBlock table = apkModule.getTableBlock();
        PackageBlock pkg = table.pickOne();

        String path = "res/xml/network_security_config.xml";

        InputStream isXML = XMLPatcher.class.getResourceAsStream(
            "/assets/network_security_config.xml"
        );

        if (isXML == null) {
            Log.e("[ERROR]", "network_security_config.xml not found");
            return;
        }

        String xml = new String(
            isXML.readAllBytes(),
            java.nio.charset.StandardCharsets.UTF_8
        );

        apkModule.add(
            new XMLEncodeSource(
                pkg,
                new XMLStringParserSource(path, xml)
            )
        );

        Entry xmlEntry = pkg.getOrCreate("", "xml", "network_security_config");
        xmlEntry.setValueAsString(path);
        Log.i("[INFO]", "Added Network Security Config");

        AndroidManifestBlock manifest = apkModule.getAndroidManifest();
        ResXmlElement app = manifest.getOrCreateApplicationElement();

        app.getOrCreateAndroidAttribute("usesCleartextTraffic", 0x010104ec)
            .setValueAsBoolean(true);
        Log.i("[INFO]", "Added Attributes usesCleartextTraffic");

        app.getOrCreateAndroidAttribute("networkSecurityConfig", 0x01010527)
            .setTypeAndData(ValueType.REFERENCE, xmlEntry.getResourceId());
        Log.i("[INFO]", "Added Attributes networkSecurityConfig");

        manifest.refreshFull();
    }
}

[REAndroid]

@krotname Awesome answer ! You have good understanding of this project hope I will see you again in PRs :)