A browser-like renderer is any software component that displays HTML and may also interpret scripts, styles, frames, or other embedded content. It is common in desktop apps, email clients, document preview panes, chat exporters, and built-in help viewers. Because it can behave like a browser without being a full browser, it often inherits browser risks while receiving less scrutiny.
In cyber security, this matters because untrusted HTML can turn into active content. An attacker may craft a file, export, or message that looks harmless but runs script when opened in a renderer with scripting enabled. That can lead to cross-site scripting-style effects, data theft, or unexpected navigation. Defenders reduce the risk by disabling script execution, sandboxing the renderer, sanitizing HTML, and treating archived exports as untrusted artifacts. When investigating incidents, analysts often check whether a vulnerable file was later opened in any browser-like previewer, not just in the original application.