Add a whitelist check for nacl-nonsfi mode

chrome/common/pepper_permission_util.h

Index: chrome/common/pepper_permission_util.h
diff --git a/chrome/common/pepper_permission_util.h b/chrome/common/pepper_permission_util.h
index 58a20e5fb16cc5b20bc136c9fb12c696557bb4a4..208e1dae4711a453f12e8b5d3069092f1a0232e0 100644
--- a/chrome/common/pepper_permission_util.h
+++ b/chrome/common/pepper_permission_util.h
@@ -17,6 +17,11 @@ class ExtensionSet;
 namespace chrome {
 
 // Returns true if the extension (or an imported module if any) is whitelisted.
+// Module imports are at most one level deep (ie, a module that exports cannot
+// import another extension).  The extension is identified by the host of |url|
+// (if it is a chrome-extension URL).  |extension_set| is the list of installed
+// and enabled extensions for a given profile.  |whitelist| is a set of
+// (possibly hashed) extension IDs to check against.
 bool IsExtensionOrSharedModuleWhitelisted(
     const GURL& url,
     const extensions::ExtensionSet* extension_set,