1 <?xml version="1.0" encoding="utf-8"?> 2 <network-security-config> 3 <base-config cleartextTrafficPermitted="false"> 4 </base-config> 5 <!-- Nested config that overrides parent --> 6 <domain-config cleartextTrafficPermitted="true"> 7 <domain includeSubdomains="true">android.com</domain> 8 <domain-config cleartextTrafficPermitted="false"> 9 <domain>developer.android.com</domain> 10 </domain-config> 11 </domain-config> 12 </network-security-config> 13