Use CapabilityFilter to restrict what HTMLViewers can connect to.

mandoline/tab/BUILD.gn

 # Copyright 2015 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//mojo/public/mojo_application.gni")
 
 source_set("tab") {
   sources = [
     "frame.cc",
     "frame.h",
     "frame_connection.cc",
     "frame_connection.h",
     "frame_tree.cc",
     "frame_tree.h",
     "frame_tree_delegate.h",
     "frame_user_data.h",
   ]
 
   deps = [
     "//base",
+    "//components/clipboard/public/interfaces",
+    "//components/devtools_service/public/interfaces",
+    "//components/resource_provider/public/interfaces",
     "//components/view_manager/public/cpp",
+    "//components/view_manager/public/interfaces",
     "//mojo/application/public/cpp:sources",
     "//mojo/application/public/interfaces",
     "//mojo/services/network/public/interfaces",
     "//third_party/mojo/src/mojo/public/cpp/bindings",
   ]
 
   public_deps = [
     "//mandoline/tab/public/interfaces",
   ]
+
+  if (is_linux && !is_android) {
+    deps += [ "//components/font_service/public/interfaces" ]
+  }
 }
 
 source_set("test_support") {
   sources = [
     "test_frame_tree_delegate.cc",
     "test_frame_tree_delegate.h",
   ]
   deps = [
     ":tab",
     "//base",
@@ skipping 16 matching lines @@
     "//components/view_manager/public/interfaces",
     "//mandoline/tab/public/interfaces",
     "//mojo/application/public/cpp:sources",
     "//mojo/application/public/cpp:test_support",
     "//ui/mojo/geometry:interfaces",
     "//ui/mojo/geometry:util",
   ]
 
   data_deps = [ "//components/view_manager" ]
 }