chrome/android/java/res/xml/network_security_config.xml

<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright 2016 The Chromium Authors. All rights reserved.
     Use of this source code is governed by a BSD-style license that can be
     found in the LICENSE file. -->

<network-security-config>
    <!-- We delegate the handling of HLS videos to Android MediaPlayer. Starting
    with Android P, the default value of isCleartextTrafficPermitted() is false.
    This breaks our usage of MediaPlayer. We have to explicitly set
    cleartextTrafficPermitted here to preserve functionality.
    See https://crbug.com/827265. See also MediaPlayerRenderer. -->
    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
            <certificates src="user"/>
            <certificates src="system"/>
        </trust-anchors>
    </base-config>
</network-security-config>