3 ms·

(And this is the default in all major browsers!)

• tgflynn 6y ago
  You're right, if I just click on a link to a file that's not a PDF in chrome (in this case it was a .ps) it does immediately download the file, but it at least displays the filename in the downloads bar below the main window. So as far as I can tell it would be hard for a site to cause a download to occur without the user noticing.
  • masklinn 6y ago
    The user not noticing is not necessarily relevant if they don’t act on it immediately, browsing to their download folder to remove the offending file. The file could stay in there for years just waiting for the system’s user to slip up. This is obviously not a targeted attack under time constraints.