Make CapabilityFilter non-nullable.
Passing null to the Shell interface means to run the application with a permissive filter. This is confusing compared to passing an empty CapabilityFilter which means run with the most restrictive filter. One should have to explicitly construct a permissive filter.
R=sky@chromium.org
BUG=
Review URL: https://codereview.chromium.org/1474563002
Cr-Commit-Position: refs/heads/master@{#361596}
CrOS-Libchrome-Original-Commit: 0a62ff059aa3b09b08a93b85135ef945ea0edf3a
3 files changed