Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

FileUploadAndDownloadSecuritySettings

Represents the security settings for uploading and downloading files. This type extends the Metadata metadata type and inherits its fullName field.

File Suffix and Directory Location

FileUploadAndDownloadSecuritySettings components have the suffix .settings and are stored in the settings folder.

Version

FileUploadAndDownloadSecuritySettings components are available in API version 39.0 and later.

Fields

Field Name	Field Type	Description
dispositions	FileTypeDispositionAssignmentBean[]	Represents the metadata used to manage filetype behavior. This field is available in API version 39.0 and later.
noHtmlUploadAsAttachment	boolean	Indicates whether to allow HTML uploads as attachments or document records. This field is available in API version 39.0 and later.

FileTypeDispositionAssignmentBean

Represents the metadata used to manage filetype behavior.

Field Name	Field Type	Description
behavior	FileDownloadBehavior (enumeration of type string)	One of the following values: DOWNLOAD EXECUTE HYBRID The following filetypes are a security risk and can not have EXECUTE behavior: EXE FLASH HTML RFC822 SVG TXML UNKNOWN WEBVIEW XHTML XML
filetype	FileType (enumeration of type string)	Although more filetypes exist, these are the only ones supported by FileTypeDispositionAssignmentBean AVI EXCEL EXCEL_X EXE FLASH HTML INSIGHT MOV MP3 MP4 MPEG PDF POWER_POINT POWER_POINT_X RFC822 SVG TXML UNKNOWN WAV WEBVIEW WMA WMV WORD WORD_X XHTML XML
securityRiskFileType	boolean	Indicates filetypes that cannot have behavior set to EXECUTE, due to security risks. This field is read-only.

Field Name

Field Type

Description

behavior

FileDownloadBehavior (enumeration of type string)

One of the following values:

DOWNLOAD
EXECUTE
HYBRID

The following filetypes are a security risk and can not have EXECUTE behavior:

EXE
FLASH
HTML
RFC822
SVG
TXML
UNKNOWN
WEBVIEW
XHTML
XML

filetype

FileType (enumeration of type string)

Although more filetypes exist, these are the only ones supported by FileTypeDispositionAssignmentBean

AVI
EXCEL
EXCEL_X
EXE
FLASH
HTML
INSIGHT
MOV
MP3
MP4
MPEG
PDF
POWER_POINT
POWER_POINT_X
RFC822
SVG
TXML
UNKNOWN
WAV
WEBVIEW
WMA
WMV
WORD
WORD_X
XHTML
XML

securityRiskFileType

boolean

Indicates filetypes that cannot have behavior set to EXECUTE, due to security risks. This field is read-only.

Declarative Metadata Sample Definition

The following is an example of a FileUploadAndDownloadSecuritySettings component.

1<FileUploadAndDownloadSecuritySettings xmlns="http://soap.sforce.com/2006/04/metadata">
2    <dispositions>
3        <behavior>HYBRID</behavior>
4        <fileType>AVI</fileType>
5        <securityRiskFileType>false</securityRiskFileType>
6    </dispositions>
7    <dispositions>
8        <behavior>HYBRID</behavior>
9        <fileType>WORD</fileType>
10        <securityRiskFileType>false</securityRiskFileType>
11    </dispositions>
12    <dispositions>
13        <behavior>HYBRID</behavior>
14        <fileType>WORD_X</fileType>
15        <securityRiskFileType>false</securityRiskFileType>
16    </dispositions>
17    <dispositions>
18        <behavior>DOWNLOAD</behavior>
19        <fileType>EXE</fileType>
20        <securityRiskFileType>true</securityRiskFileType>
21    </dispositions>
22    <dispositions>
23        <behavior>DOWNLOAD</behavior>
24        <fileType>HTML</fileType>
25        <securityRiskFileType>true</securityRiskFileType>
26    </dispositions>
27    <dispositions>
28        <behavior>DOWNLOAD</behavior>
29        <fileType>WEBVIEW</fileType>
30        <securityRiskFileType>true</securityRiskFileType>
31    </dispositions>
32    <dispositions>
33        <behavior>DOWNLOAD</behavior>
34        <fileType>RFC822</fileType>
35        <securityRiskFileType>true</securityRiskFileType>
36    </dispositions>
37    <dispositions>
38        <behavior>HYBRID</behavior>
39        <fileType>MOV</fileType>
40        <securityRiskFileType>false</securityRiskFileType>
41    </dispositions>
42    <dispositions>
43        <behavior>HYBRID</behavior>
44        <fileType>MP3</fileType>
45        <securityRiskFileType>false</securityRiskFileType>
46    </dispositions>
47    <dispositions>
48        <behavior>HYBRID</behavior>
49        <fileType>MP4</fileType>
50        <securityRiskFileType>false</securityRiskFileType>
51    </dispositions>
52    <dispositions>
53        <behavior>HYBRID</behavior>
54        <fileType>MPEG</fileType>
55        <securityRiskFileType>false</securityRiskFileType>
56    </dispositions>
57    <dispositions>
58        <behavior>HYBRID</behavior>
59        <fileType>PDF</fileType>
60        <securityRiskFileType>false</securityRiskFileType>
61    </dispositions>
62    <dispositions>
63        <behavior>HYBRID</behavior>
64        <fileType>POWER_POINT</fileType>
65        <securityRiskFileType>false</securityRiskFileType>
66    </dispositions>
67    <dispositions>
68        <behavior>HYBRID</behavior>
69        <fileType>POWER_POINT_X</fileType>
70        <securityRiskFileType>false</securityRiskFileType>
71    </dispositions>
72    <dispositions>
73        <behavior>DOWNLOAD</behavior>
74        <fileType>SVG</fileType>
75        <securityRiskFileType>true</securityRiskFileType>
76    </dispositions>
77    <dispositions>
78        <behavior>DOWNLOAD</behavior>
79        <fileType>FLASH</fileType>
80        <securityRiskFileType>true</securityRiskFileType>
81    </dispositions>
82    <dispositions>
83        <behavior>DOWNLOAD</behavior>
84        <fileType>TXML</fileType>
85        <securityRiskFileType>true</securityRiskFileType>
86    </dispositions>
87    <dispositions>
88        <behavior>DOWNLOAD</behavior>
89        <fileType>UNKNOWN</fileType>
90        <securityRiskFileType>true</securityRiskFileType>
91    </dispositions>
92    <dispositions>
93        <behavior>HYBRID</behavior>
94        <fileType>WAV</fileType>
95        <securityRiskFileType>false</securityRiskFileType>
96    </dispositions>
97    <dispositions>
98        <behavior>HYBRID</behavior>
99        <fileType>WMA</fileType>
100        <securityRiskFileType>false</securityRiskFileType>
101    </dispositions>
102    <dispositions>
103        <behavior>HYBRID</behavior>
104        <fileType>WMV</fileType>
105        <securityRiskFileType>false</securityRiskFileType>
106    </dispositions>
107    <dispositions>
108        <behavior>DOWNLOAD</behavior>
109        <fileType>XHTML</fileType>
110        <securityRiskFileType>true</securityRiskFileType>
111    </dispositions>
112    <dispositions>
113        <behavior>HYBRID</behavior>
114        <fileType>EXCEL</fileType>
115        <securityRiskFileType>false</securityRiskFileType>
116    </dispositions>
117    <dispositions>
118        <behavior>HYBRID</behavior>
119        <fileType>EXCEL_X</fileType>
120        <securityRiskFileType>false</securityRiskFileType>
121    </dispositions>
122    <dispositions>
123        <behavior>DOWNLOAD</behavior>
124        <fileType>XML</fileType>
125        <securityRiskFileType>true</securityRiskFileType>
126    </dispositions>
127    <noHtmlUploadAsAttachment>false</noHtmlUploadAsAttachment>
128</FileUploadAndDownloadSecuritySettings>

The following is an example package.xml that references the previous definition.

1<?xml version="1.0" encoding="UTF-8"?>
2<Package xmlns="http://soap.sforce.com/2006/04/metadata">
3   <types>
4       <members>FileUploadAndDownloadSecurity</members>
5       <name>Settings</name>
6   </types>
7   <version>39.0</version>
8</Package>

Wildcard Support in the Manifest File

The wildcard character * (asterisk) in the package.xml manifest file doesn’t apply to metadata types for feature settings. The wildcard applies only when retrieving all settings, not for an individual setting. For details, see Settings. For information about using the manifest file, see Deploying and Retrieving Metadata with the Zip File.

Metadata API Developer Guide