Restrict CM API interface request and message dispatch.

content/public/browser/content_browser_client.h

Index: content/public/browser/content_browser_client.h
diff --git a/content/public/browser/content_browser_client.h b/content/public/browser/content_browser_client.h
index 571f9937a8fea459440b36d9bed1576e880e0d55..8531036d3b3c39a51467e6f9d8834c494c600f40 100644
--- a/content/public/browser/content_browser_client.h
+++ b/content/public/browser/content_browser_client.h
@@ -67,6 +67,10 @@ class AudioManager;
 class CdmFactory;
 }
 
+namespace mojo {
+class ScopedInterfaceEndpointHandle;
+}
+
 namespace service_manager {
 class Service;
 struct BindSourceInfo;
@@ -656,6 +660,14 @@ class CONTENT_EXPORT ContentBrowserClient {
       const std::string& interface_name,
       mojo::ScopedMessagePipeHandle interface_pipe) {}
 
+  // Content was unable to bind a request for this associated interface, so the
+  // embedder should try.
+  virtual void BindAssociatedInterfaceRequestFromFrame(

[Ken Rockot(use gerrit already), 2017/06/30 21:11:24]

Please consider making this return a bool and take a
ScopedInterfaceEndpointHandle* instead (returns true if it actually takes
*handle and binds it, false otherwise). And then call it in
RFHI::OnAssociatedInterfaceRequest instead of WebContentsImpl.

Also please consider removing the BindSourceInfo argument since it's completely
redundant and I doubt you need it in your binder.

[engedy, 2017/06/30 22:27:01]

All done, please take a final look.

+      RenderFrameHost* render_frame_host,
+      const service_manager::BindSourceInfo& source_info,
+      const std::string& interface_name,
+      mojo::ScopedInterfaceEndpointHandle handle) {}
+
   // (Currently called only from GPUProcessHost, move somewhere more central).
   // Called when a request to bind |interface_name| on |interface_pipe| is
   // received from |source_info.identity|. If the request is bound,