You can override this behavior by following the
platform-specific guidelines to define a domain-specific
network policy. See the migration guide below for details.

Much like the platforms, the application can still open
insecure socket connections. Flutter does not enforce
any policy at socket level; you would be
responsible for securing the connection.

Migration guide

On iOS, you can add NSExceptionDomains to your
application’s Info.plist.

On Android, you can add a network security config XML.
For Flutter to find your XML file, you need to also add a
metadata entry to the <application> tag in your manifest.
This metadata entry should carry the name:
io.flutter.network-policy and should contain the
resource identifier of the XML.

For instance, if you put your XML configuration under
res/xml/network_security_config.xml,
your manifest would contain the following:

Allowing cleartext connection for debug builds