Add a whitelist check for nacl-nonsfi mode

chrome/browser/nacl_host/nacl_browser_delegate_impl.h

Index: chrome/browser/nacl_host/nacl_browser_delegate_impl.h
diff --git a/chrome/browser/nacl_host/nacl_browser_delegate_impl.h b/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
index 44b0754a4eba053a56dc8a4bb7b612c499cfa451..bd44ae06a53d587d4d7b0fa946baad33b6cc3ac0 100644
--- a/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
+++ b/chrome/browser/nacl_host/nacl_browser_delegate_impl.h
@@ -31,11 +31,13 @@ class NaClBrowserDelegateImpl : public NaClBrowserDelegate {
   virtual bool URLMatchesDebugPatterns(const GURL& manifest_url) OVERRIDE;
   virtual content::BrowserPpapiHost::OnKeepaliveCallback
       GetOnKeepaliveCallback() OVERRIDE;
+  virtual bool IsNonSfiModeAllowed(const GURL& manifest_url) OVERRIDE;
 
  private:
   scoped_refptr<extensions::InfoMap> extension_info_map_;
   std::vector<URLPattern> debug_patterns_;
   bool inverse_debug_patterns_;
+  std::set<std::string> allowed_nonsfi_origins_;
   DISALLOW_COPY_AND_ASSIGN(NaClBrowserDelegateImpl);
 };