title: iOS 9 ... Are WebView(s) exempt from the App Transport Security Exceptions (ATS) rules that block insecure HTTP hosts?
body: <p>In iOS 9, Apple is blocking insecure HTTP connections for apps, unless specific hosts are whitelisted.</p>
  
  <p><a href="http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/">http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/</a></p>
  
  <p>Are WebView(s) exempt from these rules for obvious reasons, or are we still expected to whitelist hosts that a browser opens... including all links from a given page?</p>
  
  <p>I wasn't sure if this was our responsibility or if that was exempt.</p>