Enforce Capability Filter provided in manifest

media/mojo/services/BUILD.gn

Index: media/mojo/services/BUILD.gn
diff --git a/media/mojo/services/BUILD.gn b/media/mojo/services/BUILD.gn
index 7df70982cf3a72f5a3c522fdcdd2d9e41193b57a..c73f88e74f023ea149c727764160e6cb3f2ccb51 100644
--- a/media/mojo/services/BUILD.gn
+++ b/media/mojo/services/BUILD.gn
@@ -5,6 +5,7 @@
 import("//media/media_options.gni")
 import("//testing/test.gni")
 import("//mojo/public/mojo_application.gni")
+import("//mojo/public/mojo_application_manifest.gni")
 
 # Target naming conventions:
 # - converters: C++/Mojo type converters.
@@ -265,6 +266,7 @@ mojo_native_application("media_apptests") {
   ]
 
   deps = [
+    ":apptest_manifest",
     ":proxy",
     "//media/base:test_support",
     "//mojo/shell/public/cpp:test_support",
@@ -277,10 +279,16 @@ mojo_native_application("media_apptests") {
   ]
 }
 
+mojo_application_manifest("apptest_manifest") {
+  application_name = "media_apptests"
+  source = "apptest_manifest.json"
+}
+
 mojo_native_application("media_pipeline_integration_apptests") {
   testonly = true
 
   deps = [
+    ":pipeline_apptest_manifest",
     "//media/test:mojo_pipeline_integration_tests",
   ]
 
@@ -289,6 +297,11 @@ mojo_native_application("media_pipeline_integration_apptests") {
   ]
 }
 
+mojo_application_manifest("pipeline_apptest_manifest") {
+  application_name = "media_pipeline_integration_apptests"
+  source = "pipeline_apptest_manifest.json"
+}
+
 group("tests") {
   testonly = true
   deps = [