electron is vulnerable to sandbox restrictions bypass. Apps using both contextIsolation and sandbox: true
/nativeWindowOpen: true
/nodeIntegrationInSubFrames: true
allow the code running in the main world context in the renderer to reach into the isolated electron context and perform privileged actions.