Load mac sandbox definitions from resources instead of the bundle.

content/public/common/content_client.h

Index: content/public/common/content_client.h
diff --git a/content/public/common/content_client.h b/content/public/common/content_client.h
index 840e37067174e82b814263e737edb65b7504e61c..0514e2d25976b9403a2425ce346084c444d9e907 100644
--- a/content/public/common/content_client.h
+++ b/content/public/common/content_client.h
@@ -114,6 +114,14 @@ class CONTENT_EXPORT ContentClient {
                              sandbox::TargetPolicy* policy) = 0;
 #endif
 
+#if defined(OS_MACOSX)
+  // Allows the embedder to define a new |sandbox_type| by mapping it to a

[jeremy, 2011/11/24 16:42:04]

Can you point back to the enum of sandbox types in content ?

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+  // sandbox profile given by a resource ID. Returns -1 if no sandbox profile

[jeremy, 2011/11/24 16:42:04]

*by mapping it to the resource id corresponding to the sandbox profile to use.

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+  // for the given |sandbox_type| exists or the resource ID corresponding to
+  // the sandbox profile to use.
+  virtual int GetSandboxProfileForSandboxType(int sandbox_type) const = 0;

[jeremy, 2011/11/24 16:42:04]

Per previous comment I think this would be a bit more bulletproof if it returned
a bool and filled in the resrouce_id as an output parameter.

[jochen (gone - plz use gerrit), 2011/11/24 20:08:35]

Done.

+#endif
+
  private:
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;