Scheme handlers are like cruise-control for CVEs on every OS, you should avoid using them at all costs, and if you have to, be *extremely* strict on what you al

Scheme handlers are like cruise-control for CVEs on every OS, you should avoid using them at all costs, and if you have to, be *extremely* strict on what you allow them to do. Minimizing attack surface is your #1 goal. Likewise, every Electron app needs to scan its own command-line arguments and refuse to start if...basically anything... is set. It is Unfortunate that Electron in its default configuration allows so many plainly unsafe parameters (--proxy-server also an insanely dangerous one).