Android PAC Settings Need a Reachable Script URL

Publish the PAC script at an approved network URL supported by the Android configuration, for example:

https://config.example/network/proxy.pac

That address should return the script itself, not an HTML login or download page. A fixed-route illustration is:

function FindProxyForURL(url, host) {
    return "PROXY proxy.example:8080";
}

For an independent public-site test policy where an unauthenticated HTTP intermediary is allowed, the HTTP proxy list can supply the PROXY endpoint. Keep the approved PAC delivery URL separate. The HTTPS URL delivers configuration. proxy.example:8080 is the HTTP forwarding endpoint selected by it. Enter the PAC URL in automatic configuration, not a proxy host/port field.

Make delivery work on initial and changing networks. Android's PAC service must retrieve the file before it can execute FindProxyForURL; it cannot use the unavailable script to discover how to fetch that same script. A file-manager storage path is not automatically a network resource the service can load.

Use this policy with clients supporting Android's proxy arrangement. Setting a PAC address does not add HTTP or SOCKS negotiation to unrelated raw connections.