See bug 35445. Microsoft Safe Links should not try to accept the list invite. Resolve by adding a separate accept button on the form.
Forgot to close this one. It was done together with the CSRF protection on bug 34478.