Microsoft Office pre-fetches hyperlinks using an internal DLL Show archive.org snapshot (which doesn't know about your cookies), follows all redirects and opens your browser with the result. This is because of stupidity.
The "fix" is to not redirect but just render a text like "access denied" with 200 OK when you see that request.env['HTTP_USER_AGENT'].include?('ms-office').
Posted by Henning Koch to makandra dev (2012-12-18 17:34)