Add a whitelist check for nacl-nonsfi mode

chrome/browser/nacl_host/nacl_browser_delegate_impl.h

Index: chrome/browser/nacl_host/nacl_browser_delegate_impl.h
diff --git a/chrome/browser/nacl_host/nacl_browser_delegate_impl.h b/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
index 086e1d88e27d2b3b8eb7f451c707286a6dd7f3ea..ec0858fad4ab492c6007cc174e961fbbd4b39977 100644
--- a/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
+++ b/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
@@ -9,6 +9,10 @@
 #include "components/nacl/browser/nacl_browser_delegate.h"
 #include "extensions/common/url_pattern.h"
 
+namespace extensions {
+class InfoMap;
+}
+
 class ProfileManager;
 
 class NaClBrowserDelegateImpl : public NaClBrowserDelegate {
@@ -34,11 +38,16 @@ class NaClBrowserDelegateImpl : public NaClBrowserDelegate {
   virtual bool URLMatchesDebugPatterns(const GURL& manifest_url) OVERRIDE;
   virtual content::BrowserPpapiHost::OnKeepaliveCallback
       GetOnKeepaliveCallback() OVERRIDE;
+  virtual bool IsNonSfiModeAllowed(const base::FilePath& profile_directory,
+                                   const GURL& manifest_url) OVERRIDE;
 
  private:
+  scoped_refptr<extensions::InfoMap> GetExtensionInfoMap(
+      const base::FilePath& profile_directory);
   ProfileManager* profile_manager_;
   std::vector<URLPattern> debug_patterns_;
   bool inverse_debug_patterns_;
+  std::set<std::string> allowed_nonsfi_origins_;
   DISALLOW_COPY_AND_ASSIGN(NaClBrowserDelegateImpl);
 };