This feature was recently used to bypass email link filtering systems: https://www.securityweek.com/phishers-use-new-method-bypass-office-365-safe-links https:/

This feature was recently used to bypass email link filtering systems: https://www.securityweek.com/phishers-use-new-method-bypass-office-365-safe-links https://www.securityweek.com/phishers-use-new-method-bypass-... If you want you can disallow its usage on your website with a Content-Security-Policy directive: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/base-uri https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...