chromium/chrome/android/java/res_base/xml/network_security_config.xml

<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright 2016 The Chromium Authors
Use of this source code is governed by a BSD-style license that can be
found in the LICENSE file.
-->

<network-security-config>
    <!-- We delegate the handling of HLS videos to Android MediaPlayer. Starting
    with Android P, the default value of isCleartextTrafficPermitted() is false.
    This breaks our usage of MediaPlayer. We have to explicitly set
    cleartextTrafficPermitted here to preserve functionality.
    See https://crbug.com/827265. See also MediaPlayerRenderer. -->
    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
            <certificates src="user"/>
            <certificates src="system"/>
        </trust-anchors>
    </base-config>
</network-security-config>