Allow extension APIs to be called from WebUI.

content/public/browser/child_process_security_policy.h

Index: content/public/browser/child_process_security_policy.h
diff --git a/content/public/browser/child_process_security_policy.h b/content/public/browser/child_process_security_policy.h
index 261bf58f1810ee8d559a83149a44b222f2c8039b..d4d84b79b096219018e40f47fc964b47a0c1bed9 100644
--- a/content/public/browser/child_process_security_policy.h
+++ b/content/public/browser/child_process_security_policy.h
@@ -145,6 +145,11 @@ class ChildProcessSecurityPolicy {
   // Returns true if delete-from access has been granted to |filesystem_id|.
   virtual bool CanDeleteFromFileSystem(int child_id,
                                        const std::string& filesystem_id) = 0;
+
+  // Returns true if the specified child_id has been granted WebUIBindings.

[Charlie Reis, 2014/07/22 21:10:24]

nit: WebUI bindings (same below)

(I realize it's just moving an old comment, but we may as well fix it while
we're here.)

[not at google - send to devlin, 2014/07/22 23:42:32]

Done.

+  // The browser should check this property before assuming the child process is
+  // allowed to use WebUIBindings.
+  virtual bool HasWebUIBindings(int child_id) = 0;
 };
 
 }  // namespace content