Chrome should send cookieless request to WebAPK server.

chrome/browser/android/webapk/webapk_installer.cc

Index: chrome/browser/android/webapk/webapk_installer.cc
diff --git a/chrome/browser/android/webapk/webapk_installer.cc b/chrome/browser/android/webapk/webapk_installer.cc
index cf8c3e5aacbeef5d517ddcda6e8cfcd2051d087e..6d1a78c5c22bc2c9e26e94b3e6d33345e92ce703 100644
--- a/chrome/browser/android/webapk/webapk_installer.cc
+++ b/chrome/browser/android/webapk/webapk_installer.cc
@@ -28,6 +28,7 @@
 #include "content/public/browser/browser_thread.h"
 #include "content/public/common/manifest_util.h"
 #include "jni/WebApkInstaller_jni.h"
+#include "net/base/load_flags.h"
 #include "net/http/http_status_code.h"
 #include "net/url_request/url_fetcher.h"
 #include "ui/gfx/codec/png_codec.h"
@@ -507,6 +508,8 @@ void WebApkInstaller::SendRequest(std::unique_ptr<webapk::WebApk> request_proto,
   std::string serialized_request;
   request_proto->SerializeToString(&serialized_request);
   url_fetcher_->SetUploadData(kProtoMimeType, serialized_request);
+  url_fetcher_->SetLoadFlags(net::LOAD_DO_NOT_SEND_COOKIES |
+                             net::LOAD_DO_NOT_SAVE_COOKIES);

[dominickn, 2017/01/31 18:02:14]

Should there be any other flags? net::LOAD_DISABLE_CACHE or
net::LOAD_DO_NOT_SEND_AUTH_DATA?

[Xi Han, 2017/01/31 18:12:58]

Makes sense to me. Added, thanks!

   url_fetcher_->Start();
 }