Allow cleartext HTTP for self-hosted server connections

Android 9+ blocks cleartext traffic by default. CashPilot connects
to a user-configured server that often runs HTTP on local networks.

Author: GeiserX

app/src/main/AndroidManifest.xml

@@ -33,6 +33,7 @@
         android:roundIcon="@mipmap/ic_launcher_round"
         android:label="@string/app_name"
         android:supportsRtl="true"
+        android:networkSecurityConfig="@xml/network_security_config"
         android:theme="@style/Theme.CashPilotAndroid">
 
         <activity

app/src/main/res/xml/network_security_config.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <!-- CashPilot connects to a user-configured server that may use HTTP on local networks -->
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>