Lack of permission checks in the Electron application

[ManuGowda]

Description

The code does not use the setPermissionRequestHandler function to prevent the renderer from accessing systems such as using the webcam and notification system.

As specified in Electron’s documentation: By default, Electron will automatically approve all permission requests unless the
developer has manually configured a custom handler. While a solid default, security-conscious developers might want to assume the very opposite.

This is the opposite of a browser such as Chrome who asks the user for permission. Inlisk-desktop this is not the case and may allow an attacker who can inject javascript in the application to silently record audio and video.

Reference

https://www.electronjs.org/docs/latest/tutorial/security#5-handle-session-permission-requests-from-remote-content