Disabling ATS for an in-app browser in iOS 9?
iOS 9 introduces App Transport Security (ATS) to encourage the use of secure connections. This is great, but what if my app has a built in web browser that the user should be able to use to connect to any website? For example, the Facebook app allows stories to contain links to external websites. When the user taps such a link, rather than launching Safari, it launches an in-app browser. How can I get this same behavior without enabling the global NSAllowArbitraryLoads flag ? I want all the benefits of enforcing https usage, but want to disable this check in my internal browser. In an ideal