App Transport Security has blocked Parse files... Swift 2 error

Question

I continually get this type of error in my app which uses a Parse.com backend:

App Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.

I have tried adding the following to my info.plist but it has not worked. No other solutions online have worked. Does anyone know what to do?

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSAllowsArbitraryLoads</key>
    <true/>
    <key>NSExceptionDomains</key>
    <dict>
        <key>files.parsetfss.com</key>
        <dict>
            <key>NSIncludesSubdomains</key>
            <true/>
            <key>NSExceptionsAllowsInsecureHTTPLoads</key>
            <true/>
        </dict>
    </dict>
</dict>

have you tried only with the key `NSAllowsArbitraryLoads=true`? I mean, without specifying the exception domains — dGambit, Aug 12 '15 at 23:20
@dGambit Yes, I tried just `NSAppTransportSecurity NSAllowsArbitraryLoads ` This did not work. — Anthony Saltarelli, Aug 13 '15 at 13:26

score 6 · Answer 1 · answered Aug 12 '15 at 23:35

6

This plist entry is working for me -

<key>NSAppTransportSecurity</key>
    <dict>
        <key>NSExceptionDomains</key>
        <dict>
            <key>files.parsetfss.com</key>
            <dict>
                <key>NSIncludeSubdomains</key>
                <true/>
                <key>NSExceptionAllowsInsecureHTTPLoads</key>
                <true/>
            </dict>
        </dict>
    </dict>

You have the key NSIncludesSubdomains rather than NSIncludeSubdomains - an extra s between 'Include' and 'Subdomains'

answered Aug 12 '15 at 23:35

Paulw11

108,386
14
159
186

Hmm. I changed it to this, and that didn't seem to work. Still getting an error, and it is not downloading the picture I want. – Anthony Saltarelli Aug 13 '15 at 05:24
Hmm. It is working for me and if I change the domain I get the ATS error message. Are you sure that the info.plist you are editing is the one that your app is using? – Paulw11 Aug 13 '15 at 22:11
Use the domain files.parse.com – Matt Hudson Jan 12 '16 at 05:25

score 0 · Answer 2 · answered Aug 12 '15 at 23:36

0

Also Parse just announced that they will update their SSL certs to be ATS compatible...

answered Aug 12 '15 at 23:36

der_michael

3,151
1
24
43

"Tuesday, August 11, 2015" was the day they were supposed to update. It's still not working...? – Anthony Saltarelli Aug 13 '15 at 05:26

score 0 · Answer 3 · answered Aug 13 '15 at 07:49

0

Just add above plist entry in your projects Info.plist

answered Aug 13 '15 at 07:49

Prabhu.Somasundaram

1,380
10
13

Use any REST client and run it on your machine. call the webservice and ensure that your machine would be able to connect with your webserver. – Prabhu.Somasundaram Aug 17 '15 at 07:14
This is a Bad Idea (tm) as it will make all connections vulnerable. See this answer for for the right solution: http://stackoverflow.com/a/32560433/1103584 – Marius Waldal Oct 20 '15 at 13:04

App Transport Security has blocked Parse files... Swift 2 error

3 Answers3