Load mac sandbox definitions from resources instead of the bundle.

content/public/common/content_client.h

Index: content/public/common/content_client.h
diff --git a/content/public/common/content_client.h b/content/public/common/content_client.h
index 840e37067174e82b814263e737edb65b7504e61c..90d4b48e830492e03c6de3f9be0df5b371fbe385 100644
--- a/content/public/common/content_client.h
+++ b/content/public/common/content_client.h
@@ -114,6 +114,13 @@ class CONTENT_EXPORT ContentClient {
                              sandbox::TargetPolicy* policy) = 0;
 #endif
 
+#if defined(OS_MACOSX)
+  // Allows the embedder to define a new |sandbox_type| by mapping it to a
+  // sandbox policy given by a resource ID. Returns -1 if no sandbox policy for

[jeremy, 2011/11/24 12:20:19]

*policy -> profile

[jochen (gone - plz use gerrit), 2011/11/24 16:23:22]

Done.

+  // the given |sandbox_type| exists.

[jeremy, 2011/11/24 12:20:19]

* exists -> exists or the resource id corresponding to the sandbox profile to
use.

[jochen (gone - plz use gerrit), 2011/11/24 16:23:22]

Done.

+  virtual int GetSandboxPolicyForSandboxType(int sandbox_type) const = 0;
+#endif
+
  private:
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;