Allow trusted brokers to restrict connections for spawned applications to whitelisted applications …

mojo/application/public/cpp/application_impl.h

Index: mojo/application/public/cpp/application_impl.h
diff --git a/mojo/application/public/cpp/application_impl.h b/mojo/application/public/cpp/application_impl.h
index d3fb716b2118dc4a427c518ec13a50bc944bb30f..445fb161add282e136b6317e957bf7daccae0994 100644
--- a/mojo/application/public/cpp/application_impl.h
+++ b/mojo/application/public/cpp/application_impl.h
@@ -81,7 +81,11 @@ class ApplicationImpl : public Application {
   // valid until an error occurs on the connection with the Shell, until the
   // ApplicationImpl is destroyed, or until the connection is closed through a
   // call to ApplicationConnection::CloseConnection.
-  ApplicationConnection* ConnectToApplication(mojo::URLRequestPtr request);
+  // TODO(beng): consider replacing default value in a separate CL per style
+  //             guide.
+  ApplicationConnection* ConnectToApplication(
+      URLRequestPtr request,
+      CapabilityFilterPtr filter = nullptr);
 
   // Closes the |connection|.
   void CloseConnection(ApplicationConnection* connection);
@@ -121,6 +125,7 @@ class ApplicationImpl : public Application {
   void AcceptConnection(const String& requestor_url,
                         InterfaceRequest<ServiceProvider> services,
                         ServiceProviderPtr exposed_services,
+                        Array<String> allowed_interfaces,
                         const String& url) override;
   void OnQuitRequested(const Callback<void(bool)>& callback) override;