Renderers should obtain browser InterfaceProvider by connecting to browser

chrome/browser/chrome_content_browser_client.cc

Index: chrome/browser/chrome_content_browser_client.cc
diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
index eaca7ab8535af3b4b6ab4d03014c4dc138e2efa2..8c620b9065f0db255187fded165f20bf47ed2777 100644
--- a/chrome/browser/chrome_content_browser_client.cc
+++ b/chrome/browser/chrome_content_browser_client.cc
@@ -2767,12 +2767,17 @@ bool ChromeContentBrowserClient::IsWin32kLockdownEnabledForMimeType(
 void ChromeContentBrowserClient::ExposeInterfacesToRenderer(
     shell::InterfaceRegistry* registry,
     content::RenderProcessHost* render_process_host) {
+  scoped_refptr<base::SingleThreadTaskRunner> ui_task_runner =
+      content::BrowserThread::GetTaskRunnerForThread(
+          content::BrowserThread::UI);
   registry->AddInterface(
-      base::Bind(&startup_metric_utils::StartupMetricHostImpl::Create));
+      base::Bind(&startup_metric_utils::StartupMetricHostImpl::Create),
+      ui_task_runner);
 
 #if defined(OS_CHROMEOS)
   registry->AddInterface<metrics::mojom::LeakDetector>(
-      base::Bind(&metrics::LeakDetectorRemoteController::Create));
+      base::Bind(&metrics::LeakDetectorRemoteController::Create),
+      ui_task_runner);
 #endif
 }