Security

Every tab runs as an isolated BrowserView with contextIsolation and sandbox enabled and nodeIntegration disabled, so a compromised page can't read memory from another tab or reach the main process directly. A preload channel allowlist rejects any non-allowlisted IPC channel, and every IPC handler validates its sender and payload.

HTTPS-Only mode is on by default (plain-http navigation is upgraded to HTTPS, with a warning page if the upgrade fails), WebRTC is configured to disable non-proxied UDP, and Secure DNS routes lookups over HTTPS by default. A user-managed Site Blocker can block navigation to matching host patterns, and window.open popups are always opened as tabs, never as separate windows.

Telemetry and crash reporting are disabled at startup, and errors are written to a local log (kairon-errors.log) — nothing is uploaded. Kairon does not support extensions, so there is no third-party code running inside the browser. To report a vulnerability, see the Responsible Vulnerability Disclosure Policy.