I've managed to workaround it by creating a User-Defined Setting THE_OFFENDING_URL that contains the URL value, and using ${THE_OFFENDING_URL} as the value of NSAdvertisingAttributionReportEndpoint in the plist. Of course, this will only work if you have option "Expand Build Settings in Info.plist File" set to true in your Build Settings.
I've also opened a ticket through Feedback Assistant because this is obviously a Xcode bug.
Topic:
Developer Tools & Services
SubTopic:
Xcode
Tags: