We hardened the outbound notification bridge so it re-validates the destination address at the moment it sends, not only when it is first set up. This closes a gap where a destination could be repointed to an internal address after it had been approved. Fixed and deployed.
Patrick Bass
@mobieus