Because it contains scripts that simulate attacks. Chrome or Edge may flag it as "dangerous." You can override this.
Allows for practicing SQL Injection, Cross-Site Scripting (XSS), File Inclusion, and more. dvwa master.zip
The file sat heavy on the desktop: .
Save the file and restart Apache.