> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Default behavior for CSV injection protection

> The default CSV injection setting is Allow for existing tenants and entities, and Block for new ones, enhancing protection against CSV injection attacks.

The default CSV injection setting is **Allow** for existing tenants and entities, and **Block** for new ones, enhancing protection against CSV injection attacks.

* For existing tenants and entities, the CSV injection setting is set to **Allow** by default. There is no change in behavior unless an administrator updates the setting.
* For newly created tenants and entities, the CSV injection setting is set to **Block** by default to provide stronger protection against CSV injection attacks.