What controls does Fusion have to prevent the upload of malicious files from external 3rd parties?

Summary:

Does Fusion have any layers to protect from malicious file upload from 3rd parties? For example if a threat actor posing as a prospective vendor uploaded .url file, would there be any warnings sent to the Procurement Analyst?

Content (required):

Also relevant to HCM recruiting file upload

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):