How to Configure File Upload and Download Security Settings in Salesforce

To provide more security, control the way some file types are handled during upload and download.

To manage file upload and download settings:

  1. From Setup, enter File Upload and Download Security in the Quick Find box, then select File Upload and Download Security.
  2. Click Edit.
  3. To prevent users from uploading files that can pose a security risk, select Don’t allow HTML uploads as attachments or document records.
    This setting blocks the upload of these MIME file types: .html, .htt, .mht, .svg, .swf, .thtml, and .xhtml.(If your organization uses the partner portal to give your partner users access to Salesforce, we don’t recommend enabling this setting.)
  4. Set download behavior for each file type:
    1. Download (recommended): The file, regardless of file type, is always downloaded.
    2. Execute in Browser: The file, regardless of file type, is displayed and executed automatically when accessed in a browser or through an HTTP request.
    3. Hybrid: Salesforce Files are downloaded. Attachments and documents execute in the browser.
  5. Click Save.

This blog information is very useful to learn about File upload and download security settings in Salesforce.

Author Bio

Merfantz Editor
+ Recent Posts