Defang URLs in email notifications
When sending the contents of an artifact in an email notification, the application 'defangs' any web and IP addresses automatically to prevent the user from inadvertently clicking a malicious link.
The following occurs when URLs are defanged:
http
is replaced withhxxp
ftp
is replaced withfxp
- Brackets are added to domain names, for example,
www.example.com
is replacedwith www[.]example[.]com
- Brackets are added to the IP addresses, for example,
8.8.8.8
is replaced with8[.]8[.]8[.]8
You might have a number of legitimate domains that you do not want to be defanged. In this case,
you can create a comma separated allow list that allows the specific domains to remain untouched,
for example, example.com
, example.co.uk
,
example.ie
.