I have a portal where community users can log in and attach files to records on a custom object. There is some security concerns that these users could upload anything into the salesforce system. They are uploading files (ContentDocument/ContentVersion) and I was wondering if we could put a restriction on the types of files that would be accepted.
I have checked for "File Upload and Download Security" setting, but that would not work if in case I need to prevent .xml, .mp3 or any other MIME type.
Is there any way to do so? Please let me know.
Thank you,
Madhav G.
2 answers
Thanks for the question. I've similar question for console UI (not portal). I want to restrict backend user to upload e.g. exe file. Currently, only option in setup, we have: https://help.salesforce.com/s/articleView?id=experience.admin_files_type_security.htm&type=5
To block exe file to be uploaded, i'm using 'hybrid' option. No matter which option i use, we can still upload exe.
I believe the question in discussion here is about portal but my question is about backoffice console UI. Pl advise if you implemented this use case.
