"Do not rewrite URLs in email" Not Working with Safe Links Policy

Question

"Do not rewrite URLs in email" Not Working with Safe Links Policy

Anonymous

Recently, my client discovered that a function in their web-based HRM system was affected by the Safe Links policy.

Normally, when a user applies for leave in the HRM system, an approval email is sent to the approver. The approver should be able to click the hyperlink in the email to approve the leave. However, the system is displaying the message "The record was already approved," even though the approver hasn't taken any action yet.

Upon investigation, we found that the problem is due to Safe Links rewriting and scanning the link. As a solution, we added the particular URLs to the "Do not rewrite URLs in email" list to avoid URL rewriting. Unfortunately, this did not resolve the issue. Could there be an error in any settings? Any assistance would be greatly appreciated.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

2 answers

Answer 1

Hello Eleni Constantinou,

Thank you for your prompt response and follow up.

We checked that wildcards already added. Also, we do follow the link below to Report the URL as Should not have been blocked (False positive) and select Allow this URL to add an allow entry to the Tenant Allow/Block List. However, the issue still exists. Please help. Thank you very much.

https://learn.microsoft.com/en-us/defender-office-365/submissions-admin#report-good-urls-to-microsoft

Answer 2

Hello Jeffrey Chan2,

Greetings!

Thank you for posting on Microsoft Community!

If you already have Do not rewrite the following URLs entries in your Safe Links policies, be sure to review the lists and add wildcards as required. For example, your list has an entry like https://contoso.com/a and you later decide to include subpaths like https://contoso.com/a/b. Instead of adding a new entry, add a wildcard to the existing entry so it becomes https://contoso.com/a/*. And you may also need to try to configure the list as the example below if the URL sent by the web-based HRM system has subdomain, redirection for HTTP to HTTPS,

If the above-mentioned workarounds cannot address your concern, feel free to reply and provide more information to us. We will continue to support you.

Thank you for your time and cooperation. Wish you have a nice day!