MoreInfo.url causes failure of loading GRAPH-capable spam-addin manifest. about office-js

[HugoLd]

I don't need moreinfo but my ugly trick was to host a html file on the right domain with instant redirection to the desired external link, if it can help someone

[akagarwa-msft]

Thanks for reporting this issue regarding Integrated Spam feature. It has been put on our backlog. We unfortunately have no timelines to share at this point

Internal tracking id: Office: [4637020]

[timwan10]

So I think this is kind of weird. But what is happening is the sample manifest has the url in the moreInfo category as:

https://learn.microsoft.com/...

This is ok...but when you add the WebApplicationInfo it puts more restrictions on what you are allowed to include in the URL section. (I can't find documentation for this, but checking to see if it's out there somewhere). I believe this is because the URL section is also used to load Web Taskpanes in Outlook, and they want to ensure that your graph calls are coming from URLs that are approved.

The URL for the MoreInfo section is only used to display in the dialog...but since it falls under the URLs section it is under the same restriction/security protocols.

What IS a problem is that the installer USED to give more informative error messages about the manifest. It should have said something like this:

So you can use the MoreInfo section with WebApplicationInfo, but you need to make sure the URL is still in the same domain.

[glr0221]

@timwan10 thank you so much for your explanation. Unfortunately, I don't think that forcing the domain of moreinfo same as webapplicationinfo is acceptable for our use. On the other side of the fence, I am thinking of :

1. Why not make MoreInfo.url and MoreInfo.label optional? (Right now a UI-bug happens when you remove MoreInfo.url and Moreinfo.label.)
2. If we opt to use MoreInfo.url, can't we just register the domain in the appdomains list?

I highly recommend making Moreinfo optional. Having links in the dialog to click on can be confusing for some.

Thank you again.

[akshayta23]

@glr0221 We are working on resolving this issue #4521 so I believe that #1 should be resolved once the fix is released.

Regarding #2, we need to discuss this internally with the product team before we can make any changes to the design. We will get back to you once we have an update.

[glr0221]

Thank you very much @akshayta23 .

[timwan10]

@glr0221 Is #2 not already the case? (If you add the URL to AppDomains, you should be ok?) Or are you still seeing rejections?

[glr0221]

Hello @timwan10 . I have tried adding the domain of the url in MoreInfo.url in the appdomains list. Outlook would still not install the manifest saying 'Sorry we can't complete this operation.'. However, as you have tried, if I set the Moreinfo.url with the same domain as the link in webapplicationinfo, then the manifest gets installed.