Implement Connector::ApplySpec() & use to enforce navigation:frame

content/public/browser/render_process_host.h

Index: content/public/browser/render_process_host.h
diff --git a/content/public/browser/render_process_host.h b/content/public/browser/render_process_host.h
index 1330045bb1e99842c4f4d5ffd482ee06c6fb72c1..6a3b7c9ee207829b69358c9b95b407efe492e83f 100644
--- a/content/public/browser/render_process_host.h
+++ b/content/public/browser/render_process_host.h
@@ -29,6 +29,10 @@ class SharedPersistentMemoryAllocator;
 class TimeDelta;
 }
 
+namespace service_manager {
+class Identity;
+}
+
 namespace content {
 class BrowserContext;
 class BrowserMessageFilter;
@@ -279,6 +283,8 @@ class CONTENT_EXPORT RenderProcessHost : public IPC::Sender,
   virtual void BindInterface(const std::string& interface_name,
                              mojo::ScopedMessagePipeHandle interface_pipe) = 0;
 
+  virtual const service_manager::Identity& GetChildIdentity() const = 0;

[Ken Rockot(use gerrit already), 2017/04/26 04:32:48]

nit: GetRemoteIdentity() maybe?

[Ben Goodger (Google), 2017/04/26 17:00:07]

Isn't child more accurate? This is the host of a specific child process. 

+
   // Extracts any persistent-memory-allocator used for renderer metrics.
   // Ownership is passed to the caller. To support sharing of histogram data
   // between the Renderer and the Browser, the allocator is created when the