Very cool discovery. This is an excellent example of why putting sensitive data inside URLs can be problematic and should be done with great caution. It should

Very cool discovery. This is an excellent example of why putting sensitive data inside URLs can be problematic and should be done with great caution. It should be added that the eventual elimination of referers won’t make URLs safe. There are countless other ways they can leak.