Restrict CM API interface request and message dispatch.

content/public/browser/content_browser_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_
 #define CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_
 
 #include <stddef.h>
 
 #include <map>
@@ skipping 49 matching lines @@
 namespace gpu {
 class GpuChannelEstablishFactory;
 }
 
 namespace media {
 class AudioLogFactory;
 class AudioManager;
 class CdmFactory;
 }
 
+namespace mojo {
+class ScopedInterfaceEndpointHandle;
+}
+
 namespace service_manager {
 class Service;
 struct BindSourceInfo;
 }
 
 namespace net {
 class ClientCertIdentity;
 using ClientCertIdentityList = std::vector<std::unique_ptr<ClientCertIdentity>>;
 class CookieOptions;
 class NetLog;
@@ skipping 569 matching lines @@
       RenderFrameHost* render_frame_host) {}
 
   // Content was unable to bind a request for this interface, so the embedder
   // should try.
   virtual void BindInterfaceRequestFromFrame(
       RenderFrameHost* render_frame_host,
       const service_manager::BindSourceInfo& source_info,
       const std::string& interface_name,
       mojo::ScopedMessagePipeHandle interface_pipe) {}
 
+  // Content was unable to bind a request for this associated interface, so the
+  // embedder should try.
+  virtual void BindAssociatedInterfaceRequestFromFrame(

[Ken Rockot(use gerrit already), 2017/06/30 21:11:24]

Please consider making this return a bool and take a
ScopedInterfaceEndpointHandle* instead (returns true if it actually takes
*handle and binds it, false otherwise). And then call it in
RFHI::OnAssociatedInterfaceRequest instead of WebContentsImpl.

Also please consider removing the BindSourceInfo argument since it's completely
redundant and I doubt you need it in your binder.

[engedy, 2017/06/30 22:27:01]

All done, please take a final look.

+      RenderFrameHost* render_frame_host,
+      const service_manager::BindSourceInfo& source_info,
+      const std::string& interface_name,
+      mojo::ScopedInterfaceEndpointHandle handle) {}
+
   // (Currently called only from GPUProcessHost, move somewhere more central).
   // Called when a request to bind |interface_name| on |interface_pipe| is
   // received from |source_info.identity|. If the request is bound,
   // |interface_pipe| will become invalid (taken by the client).
   virtual void BindInterfaceRequest(
       const service_manager::BindSourceInfo& source_info,
       const std::string& interface_name,
       mojo::ScopedMessagePipeHandle* interface_pipe) {}
 
   using StaticServiceMap =
@@ skipping 135 matching lines @@
   // Allows the embedder to register one or more URLLoaderThrottles for a
   // URL request. This is used only when --enable-network-service is in effect.
   // This is called on the IO thread.
   virtual std::vector<std::unique_ptr<URLLoaderThrottle>>
   CreateURLLoaderThrottles(const base::Callback<WebContents*()>& wc_getter);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_CONTENT_BROWSER_CLIENT_H_