Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?