Use the new dll injection blocking api of the sandbox to block...

chrome/browser/render_process_host.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Represents the browser side of the browser <--> renderer communication
 // channel. There will be one RenderProcessHost per renderer process.
 
 #include "chrome/browser/render_process_host.h"
 
 #include <windows.h>
@@ skipping 351 matching lines @@
           policy->SetDesktop(kDesktopName);
         } else {
           DLOG(WARNING) << "Failed to apply desktop security to the renderer";
         }
 
         if (!AddGenericPolicy(policy)) {
           NOTREACHED();
           return false;
         }
 
+        if (!AddDllEvictionPolicy(policy)) {
+          NOTREACHED();
+          return false;          
+        }
+
         result = broker_service->SpawnTarget(renderer_path.c_str(),
                                              cmd_line.c_str(),
                                              policy, &target);
         policy->Release();
 
         if (desktop)
           CloseDesktop(desktop);
 
         if (sandbox::SBOX_ALL_OK != result)
           return false;
@@ skipping 371 matching lines @@
   // NOTE: Sometimes it's necessary to create more render processes than
   //       GetMaxRendererProcessCount(), for instance when we want to create
   //       a renderer process for a profile that has no existing renderers.
   //       This is OK in moderation, since the GetMaxRendererProcessCount()
   //       is conservative.
 
   return run_renderer_in_process() ||
          (renderer_process_count >= GetMaxRendererProcessCount());
 }