[Electron] Electron vulnerable to URL spoofing via PDFium

Electron version 1.7.0 – 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000424
• https://github.com/electron/electron/pull/10008
• https://github.com/electron/electron/pull/10008/files
• https://github.com/electron/electron/releases/tag/v1.7.6
• https://github.com/advisories/GHSA-6h98-cf9g-vmg2