Expo Network Security Config

An Expo config plugin that copies a custom network security config into your Android app. This is useful when you need to allow HTTPS interception for tools like Proxyman on Android.

Platform Compatibility

| Android Device | Android Emulator | iOS Device | iOS Simulator | Web | | -------------- | ---------------- | ---------- | ------------- | --- | | ✅ | ✅ | ❌ | ❌ | ❌ |

Installation

npx expo install expo-network-security-config

Requires Expo SDK 50+.

Usage

1. Create your network_security_config.xml file somewhere in your project (e.g. assets/configs/network_security_config.xml).

2. Add the plugin to the plugins array in your app.json (or app.config.js):

{
  "plugins": [
    [
      "expo-network-security-config",
      {
        "networkSecurityConfig": "./assets/configs/network_security_config.xml",
        "enable": true
      }
    ]
  ]
}

3. Run prebuild to regenerate the native project:

npx expo prebuild

The plugin copies your XML file into android/app/src/main/res/xml/ and adds android:networkSecurityConfig to AndroidManifest.xml.

Example Config

The following example allows Proxyman to intercept HTTP/HTTPS requests by trusting user-added CAs:

<network-security-config>
  <debug-overrides>
    <trust-anchors>
      <!-- Trust user added CAs while debuggable only -->
      <certificates src="user" />
      <certificates src="system" />
    </trust-anchors>
  </debug-overrides>

  <base-config cleartextTrafficPermitted="true">
    <trust-anchors>
      <certificates src="system" />
      <certificates src="user" />
    </trust-anchors>
  </base-config>
</network-security-config>

API

| Parameter | Description | | ----------------------- | ------------------------------------------------------------------------------------------------ | | networkSecurityConfig | Path to your network_security_config.xml file, relative to the project root. | | enable | When true, the config is copied and applied. When false (or omitted), the plugin is skipped. |