Vantage documentation

Security model

Vantage owns the browser interface and policy decisions. WebKitGTK owns parsing, JavaScript, rendering, media, accessibility and the core web security model.

Security boundary

Untrusted page content runs in WebKit processes. Vantage does not expose its embedded JS++ automation runtime to page JavaScript, DOM objects or unsanitized WebKit callbacks.

Connections and certificates

The site-information control shows whether a connection is secure and provides certificate details when WebKit makes them available. Source and internal pages are identified separately rather than presented as secure websites.

Downloads and external input

Download names are sanitized, constrained to the selected destination and treated as hostile input. Browser history, imported data and downloaded files should never be treated as trusted merely because the browser created them.

Updates matter

WebKitGTK and GStreamer security updates are part of maintaining Vantage. On rolling-release systems, keep the whole operating system updated through its supported update path.