Allow trusted brokers to restrict connections for spawned applications to whitelisted applications …

mojo/application/public/cpp/application_impl.h

Index: mojo/application/public/cpp/application_impl.h
diff --git a/mojo/application/public/cpp/application_impl.h b/mojo/application/public/cpp/application_impl.h
index d3fb716b2118dc4a427c518ec13a50bc944bb30f..62637c459b8e121f9d81cc20bc47bf8272b7e952 100644
--- a/mojo/application/public/cpp/application_impl.h
+++ b/mojo/application/public/cpp/application_impl.h
@@ -81,7 +81,9 @@ class ApplicationImpl : public Application {
   // valid until an error occurs on the connection with the Shell, until the
   // ApplicationImpl is destroyed, or until the connection is closed through a
   // call to ApplicationConnection::CloseConnection.
-  ApplicationConnection* ConnectToApplication(mojo::URLRequestPtr request);
+  ApplicationConnection* ConnectToApplication(
+      URLRequestPtr request,
+      CapabilityFilterPtr filter = nullptr);

[sky, 2015/07/22 15:57:44]

Style guide says no default values.

 
   // Closes the |connection|.
   void CloseConnection(ApplicationConnection* connection);
@@ -121,6 +123,7 @@ class ApplicationImpl : public Application {
   void AcceptConnection(const String& requestor_url,
                         InterfaceRequest<ServiceProvider> services,
                         ServiceProviderPtr exposed_services,
+                        Array<String> allowed_interfaces,
                         const String& url) override;
   void OnQuitRequested(const Callback<void(bool)>& callback) override;