Move socket API restriction check to browser process

content/public/browser/content_browser_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_
 #define CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_
 #pragma once
 
 #include <string>
 #include <utility>
@@ skipping 326 matching lines @@
   virtual void ClearCookies(RenderViewHost* rvh) = 0;
 
   // Returns the default download directory.
   // This can be called on any thread.
   virtual FilePath GetDefaultDownloadDirectory() = 0;
 
   // Returns the default filename used in downloads when we have no idea what
   // else we should do with the file.
   virtual std::string GetDefaultDownloadName() = 0;
 
+  // Returns true if given origin can use TCP/UDP sockets.
+  virtual bool AllowSocketAPI(const GURL& url) = 0;
+
 #if defined(OS_POSIX) && !defined(OS_MACOSX)
   // Can return an optional fd for crash handling, otherwise returns -1. The
   // passed |command_line| will be used to start the process in question.
   virtual int GetCrashSignalFD(const CommandLine& command_line) = 0;
 #endif
 
 #if defined(OS_WIN)
   // Returns the name of the dll that contains cursors and other resources.
   virtual const wchar_t* GetResourceDllName() = 0;
 #endif
 
 #if defined(USE_NSS)
   // Return a delegate to authenticate and unlock |module|.
   // This is called on a worker thread.
   virtual
       crypto::CryptoModuleBlockingPasswordDelegate* GetCryptoPasswordDelegate(
           const GURL& url) = 0;
 #endif
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_