{"action":"created","issue":{"url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/349","labels_url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/349/labels{/name}","comments_url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/349/comments","events_url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/349/events","html_url":"https://github.com/mixpanel/mixpanel-iphone/issues/349","id":108926345,"number":349,"title":"In-App Notifications violate App Transport Security (ATS)","user":{"login":"fluidsonic","id":85242,"avatar_url":"https://avatars.githubusercontent.com/u/85242?v=3","gravatar_id":"","url":"https://api.github.com/users/fluidsonic","html_url":"https://github.com/fluidsonic","followers_url":"https://api.github.com/users/fluidsonic/followers","following_url":"https://api.github.com/users/fluidsonic/following{/other_user}","gists_url":"https://api.github.com/users/fluidsonic/gists{/gist_id}","starred_url":"https://api.github.com/users/fluidsonic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fluidsonic/subscriptions","organizations_url":"https://api.github.com/users/fluidsonic/orgs","repos_url":"https://api.github.com/users/fluidsonic/repos","events_url":"https://api.github.com/users/fluidsonic/events{/privacy}","received_events_url":"https://api.github.com/users/fluidsonic/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-29T18:12:59Z","updated_at":"2015-09-29T18:26:56Z","closed_at":null,"body":"App Transport Security (ATS) forbids non-encrypted HTTP connections in iOS 9 - i.e. it requires the use of HTTPS.\r\nHowever Mixpanel is still using HTTP for some resources.\r\n\r\nThis results in the following error:\r\n> Transport security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.\r\n\r\nCause by an image loaded for an in-app notification:\r\nhttp://images.mxpnl.com/382369/934f73146ab9770a79a3175aadf0eb33.jpg\r\n\r\nTemporary workaround is to disable ATS for `mxpnl.com` in `Info.plist`:\r\n```xml\r\n<key>NSAppTransportSecurity</key>\r\n<dict>\r\n\t<key>NSExceptionDomains</key>\r\n\t<dict>\r\n\t\t<key>mxpnl.com</key>\r\n\t\t<dict>\r\n\t\t\t<key>NSExceptionAllowsInsecureHTTPLoads</key>\r\n\t\t\t<true/>\r\n\t\t\t<key>NSExceptionRequiresForwardSecrecy</key>\r\n\t\t\t<false/>\r\n\t\t\t<key>NSIncludesSubdomains</key>\r\n\t\t\t<true/>\r\n\t\t</dict>\r\n\t</dict>\r\n</dict>\r\n```"},"comment":{"url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/comments/144146757","html_url":"https://github.com/mixpanel/mixpanel-iphone/issues/349#issuecomment-144146757","issue_url":"https://api.github.com/repos/mixpanel/mixpanel-iphone/issues/349","id":144146757,"user":{"login":"samgreen","id":276118,"avatar_url":"https://avatars.githubusercontent.com/u/276118?v=3","gravatar_id":"","url":"https://api.github.com/users/samgreen","html_url":"https://github.com/samgreen","followers_url":"https://api.github.com/users/samgreen/followers","following_url":"https://api.github.com/users/samgreen/following{/other_user}","gists_url":"https://api.github.com/users/samgreen/gists{/gist_id}","starred_url":"https://api.github.com/users/samgreen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samgreen/subscriptions","organizations_url":"https://api.github.com/users/samgreen/orgs","repos_url":"https://api.github.com/users/samgreen/repos","events_url":"https://api.github.com/users/samgreen/events{/privacy}","received_events_url":"https://api.github.com/users/samgreen/received_events","type":"User","site_admin":false},"created_at":"2015-09-29T18:26:56Z","updated_at":"2015-09-29T18:26:56Z","body":"Hey @fluidsonic thanks for the update. We're investigating now. Can you tell me where this URL came from? An in-app notification perhaps?"}}