We did a VAPT assessment and we were informed about this issue after the assessment
For this they are suggesting to make changes in
android/app/src/main/res/xml/config.xml this file from
<access origin="*" /> to something like this
" /> .
But we use too many other clients’ libraries for data analysis purposes, we can’t add all the domains here.
Is there any better solution or anyone solved it in another way?