fix(security): allow plain HTTP to DNS hosts for database connections (#1316)

Author: datlechin

CHANGELOG.md

@@ -33,6 +33,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+- ClickHouse (and any HTTP-based driver) can now connect to plain-HTTP servers addressed by DNS hostname; previously App Transport Security blocked the request because only IP-addressed plain HTTP is exempt by default (#1316)
 - Import from TablePlus now reads passwords from the keychain correctly; previously it queried the wrong service name and silently returned empty passwords without prompting
 - Port numbers in the import preview, welcome screen linked-file list, and plugin details no longer render with a thousand separator (e.g. 3306 instead of 3.306) under Vietnamese, German, and other locales that use a dot as a digit separator
 - New query tab (Cmd+T) no longer jumps focus back to the previous table tab on SQLite and other file-based databases (#1313)

TablePro/Info.plist

@@ -237,6 +237,11 @@
 			</dict>
 		</dict>
 	</array>
+	<key>NSAppTransportSecurity</key>
+	<dict>
+		<key>NSAllowsArbitraryLoads</key>
+		<true/>
+	</dict>
 	<key>NSUserActivityTypes</key>
 	<array>
 		<string>com.TablePro.viewConnection</string>

TablePro/Resources/Localizable.xcstrings

@@ -1362,6 +1362,7 @@
       }
     },
     "%@: %lld" : {
+      "extractionState" : "stale",
       "localizations" : {
         "en" : {
           "stringUnit" : {
@@ -1418,17 +1419,6 @@
         }
       }
     },
-    "%@:%lld" : {
-      "localizations" : {
-        "en" : {
-          "stringUnit" : {
-            "state" : "new",
-            "value" : "%1$@:%2$lld"
-          }
-        }
-      },
-      "shouldTranslate" : false
-    },
     "%@." : {
       "extractionState" : "stale",
       "localizations" : {
@@ -2024,6 +2014,7 @@
       }
     },
     "%lld pt" : {
+      "extractionState" : "stale",
       "localizations" : {
         "tr" : {
           "stringUnit" : {
@@ -23410,6 +23401,7 @@
       }
     },
     "hostname:%lld" : {
+      "extractionState" : "stale",
       "localizations" : {
         "tr" : {
           "stringUnit" : {
@@ -35123,6 +35115,9 @@
           }
         }
       }
+    },
+    "Preferred connects in plain TCP for this driver. Use Required to enforce TCPS." : {
+
     },
     "Preferred performs a 2-pass connect: tries TLS first, falls back to plain only on SSL handshake errors. Required by Cloud SQL and Azure MySQL." : {
 
@@ -47404,6 +47399,9 @@
     },
     "This driver does not expose routine DDL." : {
 
+    },
+    "This driver has no TLS fallback. Preferred forces TLS, same as Required." : {
+
     },
     "This DROP query will permanently remove database objects. This action cannot be undone." : {
       "localizations" : {

TableProMobile/TableProMobile/Info.plist

@@ -6,6 +6,11 @@
 	<string>$(ANALYTICS_HMAC_SECRET)</string>
 	<key>AppIdentifierPrefix</key>
 	<string>$(AppIdentifierPrefix)</string>
+	<key>NSAppTransportSecurity</key>
+	<dict>
+		<key>NSAllowsArbitraryLoads</key>
+		<true/>
+	</dict>
 	<key>NSFaceIDUsageDescription</key>
 	<string>TablePro uses Face ID to protect your saved database connections and credentials.</string>
 	<key>NSLocalNetworkUsageDescription</key>