You are here:
Review File Upload and Download Security
Learn about file upload and download security.
- Prevent Upload of Attachment with High-Risk Type Files Control
Blocks upload of executable and high-risk file types (HTML, HTM, JS, EXE, and so on) as Attachments, Documents, or ContentVersion records, preventing stored XSS and malware distribution through Salesforce files. - Prevent Download of Custom File Types Control
Organization‑level control that blocks users from downloading specified high‑risk or sensitive file extensions stored as ContentVersion records, preventing abusive or unintended downloads of dangerous or regulated file types.

