[headless] Add option to disable sandbox from API

headless/public/headless_browser.h

Index: headless/public/headless_browser.h
diff --git a/headless/public/headless_browser.h b/headless/public/headless_browser.h
index b98a40acd866820ba10df3fff87d1adaf9ec95f7..90635905f3e6818d1a03d2c74eaf0c4cb887194f 100644
--- a/headless/public/headless_browser.h
+++ b/headless/public/headless_browser.h
@@ -113,6 +113,10 @@ struct HeadlessBrowser::Options {
   // web content, which can be a security risk.
   bool single_process_mode;
 
+  // Run the browser without renderer sandbox. This option can be
+  // a security risk and should be used with caution.
+  bool disable_sandbox;
+
   // Custom network protocol handlers. These can be used to override URL
   // fetching for different network schemes.
   ProtocolHandlerMap protocol_handlers;
@@ -135,6 +139,7 @@ class HeadlessBrowser::Options::Builder {
   Builder& SetProxyServer(const net::HostPortPair& proxy_server);
   Builder& SetHostResolverRules(const std::string& host_resolver_rules);
   Builder& SetSingleProcessMode(bool single_process_mode);
+  Builder& SetDisableSandbox(bool disable_sandbox);
   Builder& SetProtocolHandlers(ProtocolHandlerMap protocol_handlers);
 
   Options Build();