don't download the obfuscated filename invoice without warning
When following the link to the payment page (firefox on macos), I get an indicator that a pdf (kquat4UC.pdf) has been downloaded. After logging in I get another download indication with a similar filename, which was my first hint that the file was actually from Intuit. As I just read about an iPhone expolit that starts with a maliciously crafted pdf, this was a bad experience.
1
vote
Rob Miller
shared this idea