Review File Upload and Download Security

Learn about file upload and download security.

• Prevent Upload of Attachment with High-Risk Type Files Control
  Blocks upload of executable and high-risk file types (HTML, HTM, JS, EXE, and so on) as Attachments, Documents, or ContentVersion records, preventing stored XSS and malware distribution through Salesforce files.
• Prevent Download of Custom File Types Control
  Organization‑level control that blocks users from downloading specified high‑risk or sensitive file extensions stored as ContentVersion records, preventing abusive or unintended downloads of dangerous or regulated file types.