wslaimin / http_proxy Goto Github PK

The option setting 'android.enableR8=true' is deprecated.
It will be removed in version 5.0 of the Android Gradle plugin.
You will no longer be able to disable R8
Affected Modules: http_proxy

Have you considered supporting http to version 1.0 or above? We are facing conflict issue while using other packages from pub.dev

After updating version of gradle, build fails saying :

A problem occurred configuring project ':http_proxy'.

Could not create an instance of type com.android.build.api.variant.impl.LibraryVariantBuilderImpl.
Namespace not specified. Specify a namespace in the module's build file. See https://d.android.com/r/tools/upgrade-assistant/set-namespace for information about setting the namespace.

If you've specified the package attribute in the source AndroidManifest.xml, you can use the AGP Upgrade Assistant to migrate to the namespace value in the build file. Refer to https://d.android.com/r/tools/upgrade-assistant/agp-upgrade-assistant for general information about using the AGP Upgrade Assistant.

The solution is to add this line under android { inside android/build.gradle : namespace group

To stay compatible with older versions of gradle, you can add this instead :
if (project.android.hasProperty("namespace")) { namespace group }

This package depends on http: ^0.12.1. Please upgrade to null safety and use http: 0.13.0

Thank you for the plugin!

When scanning the code, I've found the following in http_proxy.dart:

var client = super.createHttpClient(context);
    client.badCertificateCallback =
            (X509Certificate cert, String host, int port) {
      return true;
    };
    return client;

If I'm not mistaken, then that effectively turns off all certificate checks - any communication done with this http client is not protected against a wide range of attacks!

Is there a way to use proxies without disabling certificate checks?
If not I think there should be strong warning somewhere that the plugin should only be used for non-sensitive data or dev environments.

有考虑把http支持到1.0版本以上吗