Enforce capability spec renderer <--> browser

content/public/app/mojo/content_browser_manifest.json

Index: content/public/app/mojo/content_browser_manifest.json
diff --git a/content/public/app/mojo/content_browser_manifest.json b/content/public/app/mojo/content_browser_manifest.json
index 3cb41bfba828c034369904ab5c6321f7a42e5d91..44a404d5bbe1bc6f485d7cc3b8bc67fda43a0c1f 100644
--- a/content/public/app/mojo/content_browser_manifest.json
+++ b/content/public/app/mojo/content_browser_manifest.json
@@ -6,7 +6,21 @@
   "capabilities": {
     // Remove this once http://crbug.com/632818 is fixed.
     "provided": {
-      "all_interfaces": [ "*" ]
+      "all_interfaces": [ "*" ],
+      "web": [
+        "blink::mojom::BackgroundSyncService",
+        "blink::mojom::MimeRegistry",
+        "blink::mojom::NotificationService",
+        "blink::mojom::WebSocket",
+        "content::mojom::StoragePartitionService",
+        "content::mojom::URLLoaderFactory",
+        "device::BatteryMonitor",
+        "device::mojom::LightSensor",
+        "device::mojom::MotionSensor",
+        "device::mojom::OrientationSensor",
+        "media::mojom::ImageCapture",
+        "memory_coordinator::mojom::MemoryCoordinatorHandle"
+      ]
     },
     "required": {
       "*": { "classes": [ "app" ] },
@@ -15,7 +29,7 @@
       // processes.
       "exe:content_gpu": { "classes": [ "all_interfaces" ] },
       "exe:content_plugin": { "classes": [ "all_interfaces" ] },
-      "exe:content_renderer": { "classes": [ "all_interfaces" ] },
+      "exe:content_renderer": { "classes": [ "browser" ] },
       "exe:content_utility": { "classes": [ "all_interfaces" ] },
 
       "mojo:shell": {