Filter Update Model

SafeMode has both manual and scheduled feed update paths.

Source Families

• uBlock rules bundle (multiple upstream lists).
• PhishTank official mirror list (JSON).
• Phishing.Database text feed.

Manual Updates

From Filter Center, users can run:

• source-specific updates
• update-all action

Execution details:

• download on worker thread
• progress feedback to UI
• filter reload on successful fetch

Scheduled Updates

Main window schedules periodic checks (hourly cadence).

Decision functions:

• should_auto_update_ublock(auto_enabled, frequency)
• should_auto_update_phishtank(auto_enabled, minimum_interval_days)

These use persisted timestamps and safe defaults.

Data Persistence Model

• uBlock list content stored in filter file.
• Phishing URLs persisted in SQLite with active/inactive status.
• Source-level counts tracked (phishtank_official_count, phishing_database_count).

Phishing feed ingest is incremental:

• new URLs inserted
• existing URLs refreshed
• stale URLs marked inactive

Failure Tolerance

If one source fails:

• other sources can still update
• previously loaded data remains available
• stats signal helps diagnose partial failure

Operational Recommendations

• Keep auto-update enabled in normal environments.
• Use manual update before critical browsing sessions.
• Monitor source freshness in dashboard/Settings.
• Treat repeated source failures as operational incidents.