From fe0c8d6c282d3ed67dece745908d08e3e50efd39 Mon Sep 17 00:00:00 2001
From: cduplooy <connor@constbox.com>
Date: Wed, 21 Jan 2026 11:31:55 +0200
Subject: [PATCH 1/2] Added cleartext requests

---
 .../httptoolkit/pinning_demo/MainActivity.kt  | 38 +++++++++++++++++++
 app/src/main/res/layout/activity_main.xml     | 21 ++++++++++
 .../main/res/xml/network_security_config.xml  |  4 +-
 3 files changed, 62 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/tech/httptoolkit/pinning_demo/MainActivity.kt b/app/src/main/java/tech/httptoolkit/pinning_demo/MainActivity.kt
index 934f9a5..71f706e 100644
--- a/app/src/main/java/tech/httptoolkit/pinning_demo/MainActivity.kt
+++ b/app/src/main/java/tech/httptoolkit/pinning_demo/MainActivity.kt
@@ -36,6 +36,8 @@ import java.io.BufferedInputStream
 import java.io.BufferedReader
 import java.io.InputStreamReader
 import java.io.PrintWriter
+import java.net.HttpURLConnection
+import java.net.Proxy
 import java.net.URL
 import java.security.KeyStore
 import java.security.cert.Certificate
@@ -128,6 +130,42 @@ class MainActivity : AppCompatActivity() {
         }
     }
 
+    fun sendHttpRequest(view: View) {
+        GlobalScope.launch(Dispatchers.IO) {
+            onStart(R.id.http_request)
+            try {
+                val mURL = URL("http://amiusing.httptoolkit.tech")
+                with(mURL.openConnection() as HttpURLConnection) {
+                    println("URL: ${this.url}")
+                    println("Response Code: ${this.responseCode}")
+                }
+
+                onSuccess(R.id.http_request)
+            } catch (e: Throwable) {
+                println(e)
+                onError(R.id.http_request, e.toString())
+            }
+        }
+    }
+
+    fun sendIgnoreProxyHttpRequest(view: View) {
+        GlobalScope.launch(Dispatchers.IO) {
+            onStart(R.id.ignore_proxy_http_request)
+            try {
+                val mURL = URL("http://amiusing.httptoolkit.tech")
+                with(mURL.openConnection(Proxy.NO_PROXY) as HttpURLConnection) {
+                    println("URL: ${this.url}")
+                    println("Response Code: ${this.responseCode}")
+                }
+
+                onSuccess(R.id.ignore_proxy_http_request)
+            } catch (e: Throwable) {
+                println(e)
+                onError(R.id.ignore_proxy_http_request, e.toString())
+            }
+        }
+    }
+
     fun sendUnpinned(view: View) {
         GlobalScope.launch(Dispatchers.IO) {
             onStart(R.id.unpinned)
diff --git a/app/src/main/res/layout/activity_main.xml b/app/src/main/res/layout/activity_main.xml
index 33def92..40a23d1 100644
--- a/app/src/main/res/layout/activity_main.xml
+++ b/app/src/main/res/layout/activity_main.xml
@@ -23,6 +23,27 @@
             app:layout_constraintStart_toStartOf="parent"
             app:layout_constraintTop_toTopOf="parent">
 
+            <Button
+                android:id="@+id/http_request"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:onClick="sendHttpRequest"
+                android:text="HTTP Request" />
+
+            <Button
+                android:id="@+id/ignore_proxy_http_request"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:onClick="sendIgnoreProxyHttpRequest"
+                android:text="Ignore Proxy HTTP Request" />
+
+            <View
+                android:layout_width="match_parent"
+                android:layout_height="1dp"
+                android:layout_marginTop="10dp"
+                android:layout_marginBottom="10dp"
+                android:background="@android:color/darker_gray"/>
+
             <Button
                 android:id="@+id/unpinned"
                 android:layout_width="match_parent"
diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index fac4abd..047a8b8 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -2,7 +2,9 @@
 <network-security-config>
 
     <!-- We use amiusing.httptoolkit.tech for unpinned requests -->
-
+    <domain-config cleartextTrafficPermitted="true">
+    <domain includeSubdomains="false">amiusing.httptoolkit.tech</domain>
+    </domain-config>
     <!-- We use ecc384.badssl.com for manual pinning, defined in code -->
 
     <!-- We use sha256.badssl.com for normal config-defined pinning: -->

From 552740ed5e1978dd49eb70398d0242c3724c121b Mon Sep 17 00:00:00 2001
From: cduplooy <connor@constbox.com>
Date: Wed, 21 Jan 2026 20:32:46 +0200
Subject: [PATCH 2/2] Reworded labels to be clearer :)

---
 app/src/main/res/layout/activity_main.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/src/main/res/layout/activity_main.xml b/app/src/main/res/layout/activity_main.xml
index 40a23d1..8aa4778 100644
--- a/app/src/main/res/layout/activity_main.xml
+++ b/app/src/main/res/layout/activity_main.xml
@@ -28,14 +28,14 @@
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
                 android:onClick="sendHttpRequest"
-                android:text="HTTP Request" />
+                android:text="Plain HTTP request" />
 
             <Button
                 android:id="@+id/ignore_proxy_http_request"
                 android:layout_width="match_parent"
                 android:layout_height="wrap_content"
                 android:onClick="sendIgnoreProxyHttpRequest"
-                android:text="Ignore Proxy HTTP Request" />
+                android:text="Plain ignore-proxy HTTP request" />
 
             <View
                 android:layout_width="match_parent"