Skip to content

Latest commit

 

History

History
35 lines (31 loc) · 1.24 KB

11.Swift-ATS应用传输安全.md

File metadata and controls

35 lines (31 loc) · 1.24 KB

Swift-ATS应用传输安全

Update更新：2016年5月24日 By {MISSAJJ琴瑟静听}
此Swift基础语言笔记融合了不同版本的课程笔记
希望能帮助童鞋们巩固记忆!

App Transport Security (ATS) lets an app add a declaration to its Info.plist file that specifies the domains with which it needs secure communication. ATS prevents accidental disclosure, provides secure default behavior, and is easy to adopt. You should adopt ATS as soon as possible, regardless of whether you’re creating a new app or updating an existing one.

If you’re developing a new app, you should use HTTPS exclusively. If you have an existing app, you should use HTTPS as much as you can right now, and create a plan for migrating the rest of your app as soon as possible.

强制访问

<key>NSAppTransportSecurity</key>
<dict>
  <!--Include to allow all connections (DANGER)-->
  <key>NSAllowsArbitraryLoads</key>
      <true/>
</dict>

设置白名单

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSExceptionDomains</key>
    <dict>
        <key>localhost</key>
        <dict>
            <key>NSTemporaryExceptionAllowsInsecureHTTPLoads</key>
            <true/>
        </dict>
    </dict>
</dict>