Restrict CM API interface request and message dispatch.

content/public/browser/content_browser_client.h

Index: content/public/browser/content_browser_client.h
diff --git a/content/public/browser/content_browser_client.h b/content/public/browser/content_browser_client.h
index 571f9937a8fea459440b36d9bed1576e880e0d55..19c16eecc900b70febd95c4666ac2f4ccfb710c5 100644
--- a/content/public/browser/content_browser_client.h
+++ b/content/public/browser/content_browser_client.h
@@ -67,6 +67,10 @@ class AudioManager;
 class CdmFactory;
 }
 
+namespace mojo {
+class ScopedInterfaceEndpointHandle;
+}
+
 namespace service_manager {
 class Service;
 struct BindSourceInfo;
@@ -656,6 +660,14 @@ class CONTENT_EXPORT ContentBrowserClient {
       const std::string& interface_name,
       mojo::ScopedMessagePipeHandle interface_pipe) {}
 
+  // Content was unable to bind a request for this associated interface, so the
+  // embedder should try. Should return true if the |handle| was actually taken

[clamy, 2017/07/06 14:19:43]

nit: s/Should return/Returns

[engedy, 2017/07/06 14:22:38]

Done.

+  // and bound; false otherwise.
+  virtual bool BindAssociatedInterfaceRequestFromFrame(
+      RenderFrameHost* render_frame_host,
+      const std::string& interface_name,
+      mojo::ScopedInterfaceEndpointHandle* handle);
+
   // (Currently called only from GPUProcessHost, move somewhere more central).
   // Called when a request to bind |interface_name| on |interface_pipe| is
   // received from |source_info.identity|. If the request is bound,