If the CSV injection setting is set to Block and a user uploads a file containing risky formulas:

• The upload is blocked. A message, “Upload failed due to a formula security risk in the file. Please review the file and try again”, is displayed to the users.

• The file is not attached to the customer account.

• The user must review and clean the file (for example, remove or encode any formulas that begin with characters such as =, +, -, or @) and then upload the updated file again.

This protection prevents CSV files from executing unintended commands when opened in spreadsheet applications.