Implement Connector::ApplySpec() & use to enforce navigation:frame

services/service_manager/public/cpp/connector.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SERVICES_SERVICE_MANAGER_PUBLIC_CPP_CONNECTOR_H_
 #define SERVICES_SERVICE_MANAGER_PUBLIC_CPP_CONNECTOR_H_
 
 #include <memory>
 
 #include "services/service_manager/public/cpp/identity.h"
@@ skipping 95 matching lines @@
   virtual void BindInterface(const Identity& target,
                              const std::string& interface_name,
                              mojo::ScopedMessagePipeHandle interface_pipe) = 0;
 
   // Creates a new instance of this class which may be passed to another thread.
   // The returned object may be passed multiple times until StartService() or
   // BindInterface() is called, at which point this method must be called again
   // to pass again.
   virtual std::unique_ptr<Connector> Clone() = 0;
 
+  virtual void FilterInterfaces(const std::string& spec,
+                                const Identity& source_identity,
+                                mojom::InterfaceProviderRequest request,
+                                mojom::InterfaceProviderPtr target) = 0;
+
   // Binds a Connector request to the other end of this Connector.
   virtual void BindConnectorRequest(mojom::ConnectorRequest request) = 0;
 
   virtual base::WeakPtr<Connector> GetWeakPtr() = 0;
 
  protected:
   virtual void OverrideBinderForTesting(const std::string& service_name,
                                         const std::string& interface_name,
                                         const TestApi::Binder& binder) = 0;
   virtual void ClearBinderOverrides() = 0;
   virtual void SetStartServiceCallback(
       const StartServiceCallback& callback) = 0;
   virtual void ResetStartServiceCallback() = 0;
 };
 
 }  // namespace service_manager
 
 #endif  // SERVICES_SERVICE_MANAGER_PUBLIC_CPP_CONNECTOR_H_