Maybe I'm missing something, but if the URL shortening feature doesn't exist anymore, how can it be a vulnerability? Edit: The issue would be with existing lin

Maybe I'm missing something, but if the URL shortening feature doesn't exist anymore, how can it be a vulnerability? Edit: The issue would be with existing links, but it's difficult to change existing links for obvious reasons. Both MS And Google at this point have calculated that deleting existing vulnerable links would be worse than the security issues presented here.