Allow trusted brokers to restrict connections for spawned applications to whitelisted applications …

mandoline/ui/aura/surface_binding.cc

Index: mandoline/ui/aura/surface_binding.cc
diff --git a/mandoline/ui/aura/surface_binding.cc b/mandoline/ui/aura/surface_binding.cc
index 6f71d1e85a9d0e9ae1af7e3e657e9c98e82dea2f..f610fed0f658132d6d35602d1ccf676d9b91d5c3 100644
--- a/mandoline/ui/aura/surface_binding.cc
+++ b/mandoline/ui/aura/surface_binding.cc
@@ -208,6 +208,7 @@ void SurfaceBinding::PerViewManagerState::Init() {
   request->url = mojo::String::From("mojo:surfaces_service");
   shell_->ConnectToApplication(request.Pass(),
                                GetProxy(&surfaces_service_provider),
+                               nullptr,
                                nullptr);
   ConnectToService(surfaces_service_provider.get(), &surface_);
   surface_->GetIdNamespace(
@@ -227,6 +228,7 @@ void SurfaceBinding::PerViewManagerState::Init() {
   request2->url = mojo::String::From("mojo:view_manager");
   shell_->ConnectToApplication(request2.Pass(),
                                GetProxy(&gpu_service_provider),
+                               nullptr,
                                nullptr);
   ConnectToService(gpu_service_provider.get(), &gpu_);
 }