Implement Connector::ApplySpec() & use to enforce navigation:frame

headless/lib/browser/headless_tab_socket_impl.h

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef HEADLESS_LIB_BROWSER_HEADLESS_TAB_SOCKET_IMPL_H_
 #define HEADLESS_LIB_BROWSER_HEADLESS_TAB_SOCKET_IMPL_H_
 
 #include <list>
 
 #include "base/synchronization/lock.h"
@@ skipping 13 matching lines @@
   void SetListener(Listener* listener) override;
 
   // TabSocket implementation:
   void SendMessageToEmbedder(const std::string& message) override;
   void AwaitNextMessageFromEmbedder(
       const AwaitNextMessageFromEmbedderCallback& callback) override;
 
   void CreateMojoService(mojo::InterfaceRequest<TabSocket> request);
 
  private:
-  mojo::BindingSet<TabSocket> mojo_bindings_;
-
   base::Lock lock_;  // Protects everything below.
   AwaitNextMessageFromEmbedderCallback waiting_for_message_cb_;
   std::list<std::string> outgoing_message_queue_;
   std::list<std::string> incoming_message_queue_;
   Listener* listener_;  // NOT OWNED
 
+  // Must be listed last so it gets destructed before |waiting_for_message_cb_|.
+  mojo::BindingSet<TabSocket> mojo_bindings_;
+
   DISALLOW_COPY_AND_ASSIGN(HeadlessTabSocketImpl);
 };
 
 }  // namespace headless
 
 #endif  // HEADLESS_LIB_BROWSER_HEADLESS_TAB_SOCKET_IMPL_H_