[Mac] Only enable the CFBundleBlocker in the browser process.

In child processes, which are sandboxed in most cases, the sandbox will prevent
access to the filesystem locations where the potentially blocked bundles are
stored. Furthermore, on macOS 10.11 and higher, the Google Chrome build is
codesigned in such a way where bundle loading is blocked by SIP.

This reduces some of the "triggered DYLD shared region unnest for map" messages.

BUG=428858
R=mark@chromium.org

Review-Url: https://codereview.chromium.org/2199313002
Cr-Commit-Position: refs/heads/master@{#409244}
1 file changed