UPDATE: The exploit has been fixed in the 3.3 update, sprays and custom files have been enabled again.
We have pushed a security update due to a recent SDK2013 engine exploit.
As a safety measure, the sprays have been disabled and custom file downloads are turned off by default.
These features will be enabled again when Valve releases a fix to the engine, we apologize for any inconvenience.