Vodou never saves a file without asking first — a page cannot silently drop something onto your computer. When you download something, you'll see a prompt asking whether to save it to your Downloads folder.

Executable and installer files

File types that can run code on your computer — .exe, .msi, .bat, .ps1, .dmg, and similar — get a sterner warning that defaults to No, since a page handing you one of these unprompted is the classic "drive-by download." Only keep a file like this if you trust the site and meant to download it.

Filenames are sanitized

The filename a server suggests for your download is not trusted as-is: Vodou strips directory components, characters that could hide a file inside another one, Windows-reserved names like CON or NUL, and trailing dots or spaces, so a crafted filename can't write outside your Downloads folder or disguise an executable.