Allow webview API in an unblessed extension process

content/browser/browser_plugin/browser_plugin_guest_manager.h

Index: content/browser/browser_plugin/browser_plugin_guest_manager.h
diff --git a/content/browser/browser_plugin/browser_plugin_guest_manager.h b/content/browser/browser_plugin/browser_plugin_guest_manager.h
index a657bfa7a6771252eab565ab799b3d4423f240e0..7ef591fe9f3d3eea47629b71046cc78ad2f935fd 100644
--- a/content/browser/browser_plugin/browser_plugin_guest_manager.h
+++ b/content/browser/browser_plugin/browser_plugin_guest_manager.h
@@ -38,6 +38,9 @@ class WebContents;
 class WebContentsImpl;
 struct NativeWebKeyboardEvent;
 
+// WARNING: All APIs should be guarded with a process ID check like
+// CanEmbedderAccessInstanceIDMaybeKill, to prevent abuse by normal renderer
+// processes.
 class CONTENT_EXPORT BrowserPluginGuestManager :
     public base::SupportsUserData::Data {
  public: