Hello, this is somewhat of a minor issue, but I recently noticed in the analytics for my website I had gotten a click from the referrer "mypads.framapad.org." I clicked the link to see the website, and it logged me in to what looked like someone's private collaborative document. I closed the tab immediately, but wanted to open an issue so you were made aware.
The referring link was in the format:
I suggest routing outbound links from your application through a redirect to obscure the actual source (and more importantly auth_token parameter). So if a link goes to
https://website.com rewrite it to something