1<?xml version="1.0" encoding="utf-8"?>
2<network-security-config>
3    <base-config cleartextTrafficPermitted="false">
4    </base-config>
5    <!-- Nested config that overrides parent -->
6    <domain-config cleartextTrafficPermitted="true">
7        <domain includeSubdomains="true">android.com</domain>
8        <domain-config cleartextTrafficPermitted="false">
9            <domain>developer.android.com</domain>
10        </domain-config>
11    </domain-config>
12</network-security-config>
13