tests/tests/networksecurityconfig/networksecurityconfig-cleartext/res/xml/network_security_config.xml

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <domain-config cleartextTrafficPermitted="false">
    <domain includeSubdomains="true">android.com</domain>
    <domain-config cleartextTrafficPermitted="true">
      <domain>developer.android.com</domain>
    </domain-config>
  </domain-config>
</network-security-config>