/ /

How to manage redirection warnings & domain allowlist

Updated 17 days ago

Overview

When recipients click an external link (a link outside your intranet) in a newsletter, Simpplr can display a redirection warning to alert them before they leave the platform. As an App manager, you can control whether this warning is shown, and add trusted domains to an allowlist so users don't see warnings for links from those sources.

Before you begin

  • You must be an App manager or have Application Settings Access Control.

How the redirection warning works

When a recipient clicks a link in a newsletter that points to a website outside the intranet domain, they see a warning message before being redirected. This helps users verify external URLs before proceeding, reducing the risk of unintentional redirection to untrusted sites.

Default behaviour: the redirection warning is enabled by default for all customers, except those who have previously requested it to be disabled.

Step 1 – Access the redirection warning settings

  1. Go to your User menu and select Manage.

  2. Navigate to Application > Setup > Newsletter.

  3. Locate the Redirection warning section.

Step 2 – Enable or disable the redirection warning

  1. In the Redirection warning section, toggle the setting on or off depending on your organisation's preference.

  2. Click Save to apply the change.

Tip: keeping the warning enabled is recommended as a security best practice, especially for organisations that frequently link to external news sources or third-party tools.

Step 3 – Add trusted domains to the allowlist

If your organisation regularly links to trusted external sources (e.g. medium.com, techcrunch.com) and you don't want users to see a warning for those links, add those domains to the allowlist.

  1. In the Redirection warning section (same screen as Step 1), locate the domain allowlist field.

  2. Enter the domain you want to trust (e.g. medium.com).

  3. Click Add to add it to the list.

  4. Repeat for any additional trusted domains.

  5. Click Save.

Once a domain is allowlisted, users will not see a redirection warning when clicking links from that domain in any newsletter.

Step 4 – Remove a domain from the allowlist

  1. Go back to Application > Setup > Newsletter > Redirection warning.

  2. Locate the domain you want to remove in the allowlist.

  3. Click the remove/delete icon next to it.

  4. Click Save.

Things to keep in mind

Scenario

What happens

Warning is enabled, domain is not allowlisted

Users see a warning before being redirected

Warning is enabled, domain is allowlisted

Users are redirected without a warning

Warning is disabled

No warnings shown for any external links

Frequently asked questions

Q: Is the redirection warning turned on by default?

Ans: Yes. It's enabled by default for all customers, unless an organisation has previously requested it to be disabled.

Q: Who can turn the redirection warning on or off?

Ans: You need to be an App manager or have Application Settings Access Control to change this setting.

Q: Should I disable the redirection warning entirely?

Ans: It's generally recommended to keep it enabled as a security best practice, especially if your organisation frequently links to external news sources or third-party tools. Instead of disabling it entirely, consider allowlisting specific trusted domains.

Q: What's the benefit of adding a domain to the allowlist instead of just disabling the warning?

Ans: Allowlisting lets you skip the warning only for domains you trust, while still showing it for any other unfamiliar external links, giving you more targeted control than disabling the feature altogether.

Q: Will users see a warning for a domain I've added to the allowlist?

Ans: No. Once a domain is allowlisted, users will not see a redirection warning when clicking links from that domain in any newsletter.

Q: How do I remove a domain from the allowlist if I no longer trust it?

Ans: Go to Application > Setup > Newsletter > Redirection warning, find the domain in the allowlist, click the remove/delete icon next to it, and click Save.

Q: If I disable the redirection warning, does that override my domain allowlist?

Ans: Yes, in effect. If the warning is disabled altogether, no warnings will show for any external links, regardless of whether a domain is allowlisted or not.

Q: When was domain allowlisting introduced?

Ans: The basic redirection warning was introduced in the 25.08 release, and domain allowlisting was added in the 25.10 release.

Was this article helpful?
Subscribe to receive updates on this article