Load mac sandbox definitions from resources instead of the bundle.

content/public/common/content_client.h

Index: content/public/common/content_client.h
diff --git a/content/public/common/content_client.h b/content/public/common/content_client.h
index 840e37067174e82b814263e737edb65b7504e61c..f984b47f409945116fe2a0f19ab0b6c4452b4c9f 100644
--- a/content/public/common/content_client.h
+++ b/content/public/common/content_client.h
@@ -114,6 +114,19 @@ class CONTENT_EXPORT ContentClient {
                              sandbox::TargetPolicy* policy) = 0;
 #endif
 
+#if defined(OS_MACOSX)
+  // Allows the embedder to define a new |sandbox_type| by mapping it to the
+  // resource ID corresponding to the sandbox profile to use. The legal values
+  // for |sandbox_type| are defined by the embedder and should start with
+  // SandboxType::SANDBOX_TYPE_AFTER_LAST_TYPE. Returns false if no sandbox
+  // profile for the given |sandbox_type| exists. Otherwise,
+  // |sandbox_profile_resource_id| is set to the resource ID corresponding to
+  // the sandbox profile to use and true is returned.
+  virtual bool GetSandboxProfileForSandboxType(
+      int sandbox_type,
+      int* sandbox_profile_resource_id) const = 0;
+#endif
+
  private:
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;