Defang URLs in email notifications

When sending the contents of an artifact in an email notification, the application 'defangs' any web and IP addresses automatically to prevent the user from inadvertently clicking a malicious link.

The following occurs when URLs are defanged:
  • http is replaced with hxxp
  • ftp is replaced with fxp
  • Brackets are added to domain names, for example, www.example.com is replaced with www[.]example[.]com
  • Brackets are added to the IP addresses, for example, 8.8.8.8 is replaced with 8[.]8[.]8[.]8

You might have a number of legitimate domains that you do not want to be defanged. In this case, you can create a comma separated allow list that allows the specific domains to remain untouched, for example, example.com, example.co.uk, example.ie.