Hi Team,

I have checked the iOS Info.plist file, and by default, the property NSAllowsArbitraryLoads is set to true. Currently, this value cannot be overridden.

While I understand that we can configure and enforce HTTPS connections at the server level, this property setting goes against iOS’s default security best practices. Moreover, when publishing the app to the App Store, we need to provide justification for having NSAllowsArbitraryLoads = true.

I would like to suggest the following:

• Provide an option in the Extensibility Configurations to set NSAllowsArbitraryLoads to false, or

• Set this property to false by default, allowing developers to define their own approved domains (as explained in the documentation).

This will help align the app with Apple’s recommended security standards and simplify the App Store review process.

Reference: 🔗 https://developer.apple.com/documentation/bundleresources/information-property-list/nsapptransportsecurity/nsallowsarbitraryloads