Client Data Transfer

The security.dataTransfer node controls files crossing the browser boundary — uploads from the user's device into the session and downloads from the session back to the device — and the maximum file size for each.

What these flags gate

These toggles govern transfer across the browser boundary: the file-transfer panel, file dialogs and the HTTP file APIs. They do not gate in-panel browsing of server-side locations or server-side file operations, and they are separate from print PDF delivery (which is controlled by Printing). Whether a user can reach a given location at all is set by the file-system trust level; data transfer governs whether bytes may cross to or from the device.

Properties

Print PDF size lives here too

The editor surfaces security.printing.maxOutputSizeBytes (the print PDF delivery cap) within this same accordion as an optional "Max PDF size" field. Leaving it empty makes the print cap fall back to maxFileSizeBytes. See Printing.

Sample

"dataTransfer": {
  "clientUploadEnabled": false,
  "clientDownloadEnabled": false,
  "maxFileSizeBytes": 104857600
}