block permission and popup requests

hellgate.js

@@ -56,6 +56,15 @@ async function handle_request(request, response) {
     var data = ""
     var available_sigils = fs.readdirSync(sigils_dir)
 
+    win.webContents.session.setPermissionRequestHandler((webContents, permission, callback) => {
+        return callback(false)
+    })
+
+    win.webContents.setWindowOpenHandler(() => {
+        console.log("Blocked a popup request")
+        return {action: 'deny'}
+    })
+
     console.log(`Got request for "${target_url}"`)
 
     await Promise.race([