title: Disabling ATS for an in-app browser in iOS 9?
body: <p>iOS 9 introduces <a href="https://developer.apple.com/library/prerelease/ios/releasenotes/General/WhatsNewIniOS/Articles/iOS9.html#//apple_ref/doc/uid/TP40016198-SW14" rel="nofollow noreferrer">App Transport Security (ATS)</a> to encourage the use of secure connections.</p>
  
  <p>This is great, but what if my app has a built in web browser that the user should be able to use to connect to any website? For example, the Facebook app allows stories to contain links to external websites. When the user taps such a link, rather than launching Safari, it launches an in-app browser.</p>
  
  <p>How can I get this same behavior without <a href="https://stackoverflow.com/questions/30751053/ios9-ats-what-about-html5-based-apps">enabling the global NSAllowArbitraryLoads flag</a>?</p>
  
  <p>I want all the benefits of enforcing https usage, but want to disable this check in my internal browser. In an ideal world, Apple would allow me to specify a property on my UIWebView to allow it to load insecure URLs, rather than it being all or nothing. There is no way I can whitelist every single domain, since I have no idea which URLs my users will load. I'm looking for a solution that is compatible with iOS 8.</p>