A "security researcher" just emailed us reported entering a hyperlink as an exploit. Maybe... research that one a bit more?