Hi, Via some twitter discussions [1] I recently learned about a worrying behavior of wget and Chromium / Chrome. The URL of downloads gets stored via filesystem attributes on systems that support Unix extended attributes.

https://seclists.org/oss-sec/2019/q1/0