In the Global Settings function, the Authentication tab contains an allowlist of hostnames in the Allows website domains of fully qualified domain names, or IP addresses that can be used as links generated by the notification server for workflow emails, the reset password link, and more.
Enter a list of elements you want to allow as links sent by email.
Creating an allowlist increases the protection against man-in-the-middle attacks and email spoofing.