It says it can be disabled so it is auto. How to disable? Screenshot by Lightshot
In the user.xml, change to <RequireURLConfirmation>false</RequireURLConfirmation>