Allow the MITIGATION_WIN32K_DISABLE process mitigation to be set in the renderer sandbox.

content/public/common/content_switches.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/content_switches.h"
 
 #include "base/command_line.h"
 
 namespace switches {
 
@@ skipping 412 matching lines @@
 
 #if defined(OS_WIN)
 // Disable the Legacy Window which corresponds to the size of the WebContents.
 const char kDisableLegacyIntermediateWindow[] = "disable-legacy-window";
 
 // Enables the DirectWrite font rendering system on windows.
 const char kEnableDirectWrite[]             = "enable-direct-write";
 
 // Use high resolution timers for TimeTicks.
 const char kEnableHighResolutionTime[]      = "enable-high-resolution-time";
+
+// Enable the GDI32 and USER32 process mitigation policy for renderer processes
+// which prevents them from invoking user32 and gdi32 system calls which enter
+// the kernel. This is only supported on Windows 8 and beyond.
+const char kEnableGDIUser32RendererLockDown[]
+    = "enable_gdi_user32_renderer_lockdown";

[jschuh, 2014/05/16 20:28:12]

Could we just call these kEnableWin32kRendererLockDown and
enable_win32k_renderer_lockdown? That way they match the mitigation naming
convention.

[ananta, 2014/05/16 21:12:18]

Done.

 #endif
 
 // Paint content on the compositor thread instead of the main thread.
 const char kEnableImplSidePainting[]        = "enable-impl-side-painting";
 
 // Enables support for inband text tracks in media content.
 const char kEnableInbandTextTracks[]        = "enable-inband-text-tracks";
 
 // Force logging to be enabled.  Logging is disabled by default in release
 // builds.
@@ skipping 553 matching lines @@
 
 // Disables support for Core Animation plugins. This is triggered when
 // accelerated compositing is disabled. See http://crbug.com/122430 .
 const char kDisableCoreAnimationPlugins[] =
     "disable-core-animation-plugins";
 #endif
 
 // Don't dump stuff here, follow the same order as the header.
 
 }  // namespace switches