Why is the hyperlink not removed after CDR in MS Outlook?

I. Story

After we sanitize an email with a configuration to remove hyperlinks, the hyperlink is still clickable in MS Outlook

II. Solution

CDR engine removed all of the links under href tag but Outlook has a feature to change the text link to be clickable called AutoFormat.

To avoid this, turn off AutoFormat feature which is enabled by default in MS Outlook following this link

This article pertains to MetaDefender Email Security v4.0.0 or above
This article was last updated on 2021-1-5