[Bug]: CIPP resets "Send reported items to" setting when using the "Set the state of the built-in Report button in Outlook" standard

[joeldeteves]

Required confirmations before submitting

• I can reproduce this issue on the latest released versions of both CIPP and CIPP-API.
• I have searched existing issues (both open and closed) to avoid duplicates.
• I am not requesting general support; this is an actual bug report.

Issue Description

CIPP currently resets the state of the "Send reported items to" setting when using the Standard that controls the Report Phishing button behavior:

Because we use third-party phishing services e.g. Checkpoint (Avanan), Huntress, etc. we always set this to "My reporting mailbox only."

Our third party services then handle the forwarding on the Microsoft side.

Having this enabled can result in the user receiving an auto responder from Microsoft that incldues the message headers of the email they just reported for phishing.

To resolve it, the default should either be OFF or it should be configurable as part of the standard.

Environment Type

Sponsored (paying) user

Front End Version

v10.9.1

Back End Version

v10.9.1

Relevant Logs / Stack Trace

[github-actions]

Thank you for reporting a potential bug. If you would like to work on this bug, please comment:

I would like to work on this please!

Thank you for helping us maintain the project!