(try to) exploit itwin studio url handler

[dms1lva]

//https://medium.com/hackernoon/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374
//https://github.com/iTwin/studio/blob/103bfac86ade527fe80698e9e9a84b307fca9968/packages/framework/src/root/ParseLaunchArgs.ts#L60
if (launchArgs.uri) hoistUrlParameters(launchArgs.uri);
//https://github.com/iTwin/studio/blob/15c236e15173c52679ff8944cf8684b2542301fd/packages/framework/src/root/ITwinStudioProtocol.ts#L112
export function hoistUrlParameters(urlString: string) {
const url = new URL(urlString);
const urlParams = url.searchParams.entries();
for (const [key, value] of urlParams) {
process.argv.push(--${key}=${value});
}
}