Load mac sandbox definitions from resources instead of the bundle.

content/DEPS

 # Do NOT add chrome to the list below.  We shouldn't be including files from
 # src/chrome in src/content.
 include_rules = [
   "+crypto",
 
   "-chrome",
   # Until we move most of our testing infrastructure in a way that content can
   # make use of it.
   "+chrome/test",
 
   # The subdirectories in content/ will manually allow their own include
   # directories in content/ so we disallow all of them.
   "-content",
   "+content/common",
   "+content/public/common",
   "+content/test",
 
   # TODO(ben): remove this
   "+content/public/browser/native_web_keyboard_event.h",
 
   "+dbus",
-  "+grit",
   "+gpu",
   "+net",
   "+ppapi",
   "+printing",
   "+sandbox",
   "+skia",
 
   # Don't allow inclusion of these other libs we shouldn't be calling directly.
   "-v8",
   "-tools",
@@ skipping 19 matching lines @@
   "+ui/base/l10n/l10n_util_win.h",
 
   # Content shouldn't depend on views. While we technically don't need this
   # line, since the top level DEPS doesn't allow it, we add it to make this
   # explicit. 
   "-views",
   
   # Aura Shell consumes views, so it too is banned.
   "-ui/aura_shell",
 
+  # Don't allow inclusion of generated resources files.
+  "-grit",

[jam, 2011/11/23 20:29:17]

can we just allow the ones that content can include right here? i.e.

"+grit/content_resources.h",
"+grit/webkit_strings.h",
"+grit/webkit_chromium_resources.h"

that way there's just one place that shows which grit files content can use
(other than content/shell or tests, which is a separate story)

[jochen (gone - plz use gerrit), 2011/11/23 21:51:00]

Done.

+
   "+webkit",
 ]