Load mac sandbox definitions from resources instead of the bundle.

content/public/common/content_client.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 #define CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 96 matching lines @@
 
   // Return the contents of a resource in a StringPiece given the resource id.
   virtual base::StringPiece GetDataResource(int resource_id) const = 0;
 
 #if defined(OS_WIN)
   // Allows the embedder to sandbox a plugin, and apply a custom policy.
   virtual bool SandboxPlugin(CommandLine* command_line,
                              sandbox::TargetPolicy* policy) = 0;
 #endif
 
+#if defined(OS_MACOSX)
+  // Allows the embedder to define a new |sandbox_type| by mapping it to a

[jeremy, 2011/11/24 16:42:04]

Can you point back to the enum of sandbox types in content ?

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+  // sandbox profile given by a resource ID. Returns -1 if no sandbox profile

[jeremy, 2011/11/24 16:42:04]

*by mapping it to the resource id corresponding to the sandbox profile to use.

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+  // for the given |sandbox_type| exists or the resource ID corresponding to
+  // the sandbox profile to use.
+  virtual int GetSandboxProfileForSandboxType(int sandbox_type) const = 0;

[jeremy, 2011/11/24 16:42:04]

Per previous comment I think this would be a bit more bulletproof if it returned
a bool and filled in the resrouce_id as an output parameter.

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+#endif
+
  private:
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;
   // The embedder API for participating in plugin logic.
   ContentPluginClient* plugin_;
   // The embedder API for participating in renderer logic.
   ContentRendererClient* renderer_;
   // The embedder API for participating in utility logic.
   ContentUtilityClient* utility_;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_