Move sandbox_policy to content.

content/common/content_client.h

Index: content/common/content_client.h
===================================================================
--- content/common/content_client.h	(revision 87093)
+++ content/common/content_client.h	(working copy)
@@ -11,6 +11,7 @@
 #include "base/basictypes.h"
 #include "build/build_config.h"
 
+class CommandLine;
 class GURL;
 struct GPUInfo;
 struct PepperPluginInfo;
@@ -19,6 +20,10 @@
 class Message;
 }
 
+namespace sandbox {
+class TargetPolicy;
+}
+
 namespace content {
 
 class ContentBrowserClient;
@@ -61,6 +66,12 @@
   // behalf of a swapped out renderer.
   virtual bool CanHandleWhileSwappedOut(const IPC::Message& msg);
 
+#if defined(OS_WIN)
+  // Allows the embedder to sandbox a plugin, and apply a custom policy.
+  virtual bool SandboxPlugin(CommandLine* command_line,
+                             sandbox::TargetPolicy* policy);
+#endif
+
  private:
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;