tl;dr: Microsoft and other email security scanners will visit the links in email you transmit, and run the JavaScript in those links, including calls that lead to POSTs going out. This used to be unacceptable, since POSTs have side effects. Yet here we are. This breaks even somewhat sophisticated single-use sign-on / email confirmation messages. Read on for how to deal with this, and some thoughts on how we should treat gatekeepers like Microsoft that can randomly break things & get away with...| Bert Hubert's writings
Last year the European Union enacted a new regulation called the Digital Markets Act (DMA), which applies to companies who have been designated as “Gatekeepers.” These n…| Google