FileUploadAndDownloadSecuritySettings

Represents the security settings for uploading and downloading files.

Parent Type

This type extends Metadata and inherits its fields.

File Suffix and Directory Location

FileUploadAndDownloadSecuritySettings components have the suffix .settings and are stored in the settings folder.

Version

Introduced in API version 39.0.

Fields

cmsDispositions

Type: FileTypeDispositionAssignmentBean[]
Required: No

dispositions

Type: FileTypeDispositionAssignmentBean[]
Required: No
Introduced: API version 39.0
Description: Represents the metadata used to manage filetype behavior.

noHtmlUploadAsAttachment

Type: boolean
Required: Yes
Introduced: API version 39.0
Description: Indicates whether to allow HTML uploads as attachments or document records.

FileTypeDispositionAssignmentBean Type

Represents the metadata used to manage filetype behavior.

Fields

behavior

Type: FileDownloadBehavior (enumeration of type string)
Required: Yes
Description: One of the following values:
- DOWNLOAD
- EXECUTE
- HYBRID
The following filetypes are a security risk and can not have EXECUTE behavior:
- EXE
- FLASH
- HTML
- RFC822
- SVG
- TXML
- UNKNOWN
- WEBVIEW
- XHTML
- XML

fileType

Type: FileType (enumeration of type string)
Required: Yes
Description: Although more filetypes exist, these are the only ones supported by FileTypeDispositionAssignmentBean
- AVI
- EXCEL
- EXCEL_X
- EXE
- FLASH
- HTML
- INSIGHT
- MOV
- MP3
- MP4
- MPEG
- PDF
- POWER_POINT
- POWER_POINT_X
- RFC822
- SVG
- TXML
- UNKNOWN
- WAV
- WEBVIEW
- WMA
- WMV
- WORD
- WORD_X
- XHTML
- XML

securityRiskFileType

Type: boolean
Required: Yes
Description: Indicates filetypes that cannot have behavior set to EXECUTE, due to security risks. This field is read-only.

Declarative Metadata Sample Definition

The following is an example of a FileUploadAndDownloadSecuritySettings component.

1<FileUploadAndDownloadSecuritySettings xmlns="http://soap.sforce.com/2006/04/metadata">
2    <dispositions>
3        <behavior>HYBRID</behavior>
4        <fileType>AVI</fileType>
5        <securityRiskFileType>false</securityRiskFileType>
6    </dispositions>
7    <dispositions>
8        <behavior>HYBRID</behavior>
9        <fileType>WORD</fileType>
10        <securityRiskFileType>false</securityRiskFileType>
11    </dispositions>
12    <dispositions>
13        <behavior>HYBRID</behavior>
14        <fileType>WORD_X</fileType>
15        <securityRiskFileType>false</securityRiskFileType>
16    </dispositions>
17    <dispositions>
18        <behavior>DOWNLOAD</behavior>
19        <fileType>EXE</fileType>
20        <securityRiskFileType>true</securityRiskFileType>
21    </dispositions>
22    <dispositions>
23        <behavior>DOWNLOAD</behavior>
24        <fileType>HTML</fileType>
25        <securityRiskFileType>true</securityRiskFileType>
26    </dispositions>
27    <dispositions>
28        <behavior>DOWNLOAD</behavior>
29        <fileType>WEBVIEW</fileType>
30        <securityRiskFileType>true</securityRiskFileType>
31    </dispositions>
32    <dispositions>
33        <behavior>DOWNLOAD</behavior>
34        <fileType>RFC822</fileType>
35        <securityRiskFileType>true</securityRiskFileType>
36    </dispositions>
37    <dispositions>
38        <behavior>HYBRID</behavior>
39        <fileType>MOV</fileType>
40        <securityRiskFileType>false</securityRiskFileType>
41    </dispositions>
42    <dispositions>
43        <behavior>HYBRID</behavior>
44        <fileType>MP3</fileType>
45        <securityRiskFileType>false</securityRiskFileType>
46    </dispositions>
47    <dispositions>
48        <behavior>HYBRID</behavior>
49        <fileType>MP4</fileType>
50        <securityRiskFileType>false</securityRiskFileType>
51    </dispositions>
52    <dispositions>
53        <behavior>HYBRID</behavior>
54        <fileType>MPEG</fileType>
55        <securityRiskFileType>false</securityRiskFileType>
56    </dispositions>
57    <dispositions>
58        <behavior>HYBRID</behavior>
59        <fileType>PDF</fileType>
60        <securityRiskFileType>false</securityRiskFileType>
61    </dispositions>
62    <dispositions>
63        <behavior>HYBRID</behavior>
64        <fileType>POWER_POINT</fileType>
65        <securityRiskFileType>false</securityRiskFileType>
66    </dispositions>
67    <dispositions>
68        <behavior>HYBRID</behavior>
69        <fileType>POWER_POINT_X</fileType>
70        <securityRiskFileType>false</securityRiskFileType>
71    </dispositions>
72    <dispositions>
73        <behavior>DOWNLOAD</behavior>
74        <fileType>SVG</fileType>
75        <securityRiskFileType>true</securityRiskFileType>
76    </dispositions>
77    <dispositions>
78        <behavior>DOWNLOAD</behavior>
79        <fileType>FLASH</fileType>
80        <securityRiskFileType>true</securityRiskFileType>
81    </dispositions>
82    <dispositions>
83        <behavior>DOWNLOAD</behavior>
84        <fileType>TXML</fileType>
85        <securityRiskFileType>true</securityRiskFileType>
86    </dispositions>
87    <dispositions>
88        <behavior>DOWNLOAD</behavior>
89        <fileType>UNKNOWN</fileType>
90        <securityRiskFileType>true</securityRiskFileType>
91    </dispositions>
92    <dispositions>
93        <behavior>HYBRID</behavior>
94        <fileType>WAV</fileType>
95        <securityRiskFileType>false</securityRiskFileType>
96    </dispositions>
97    <dispositions>
98        <behavior>HYBRID</behavior>
99        <fileType>WMA</fileType>
100        <securityRiskFileType>false</securityRiskFileType>
101    </dispositions>
102    <dispositions>
103        <behavior>HYBRID</behavior>
104        <fileType>WMV</fileType>
105        <securityRiskFileType>false</securityRiskFileType>
106    </dispositions>
107    <dispositions>
108        <behavior>DOWNLOAD</behavior>
109        <fileType>XHTML</fileType>
110        <securityRiskFileType>true</securityRiskFileType>
111    </dispositions>
112    <dispositions>
113        <behavior>HYBRID</behavior>
114        <fileType>EXCEL</fileType>
115        <securityRiskFileType>false</securityRiskFileType>
116    </dispositions>
117    <dispositions>
118        <behavior>HYBRID</behavior>
119        <fileType>EXCEL_X</fileType>
120        <securityRiskFileType>false</securityRiskFileType>
121    </dispositions>
122    <dispositions>
123        <behavior>DOWNLOAD</behavior>
124        <fileType>XML</fileType>
125        <securityRiskFileType>true</securityRiskFileType>
126    </dispositions>
127    <noHtmlUploadAsAttachment>false</noHtmlUploadAsAttachment>
128</FileUploadAndDownloadSecuritySettings>

The following is an example package.xml that references the previous definition.

1<?xml version="1.0" encoding="UTF-8"?>
2<Package xmlns="http://soap.sforce.com/2006/04/metadata">
3   <types>
4       <members>FileUploadAndDownloadSecurity</members>
5       <name>Settings</name>
6   </types>
7   <version>39.0</version>
8</Package>

Wildcard Support in the Manifest File

The wildcard character * (asterisk) in the package.xml manifest file doesn’t apply to metadata types for feature settings. The wildcard applies only when retrieving all settings, not for an individual setting. For details, see Settings. For information about using the manifest file, see Deploying and Retrieving Metadata with the Zip File.

DID THIS ARTICLE SOLVE YOUR ISSUE?
Let us know so we can improve!