logoalt Hacker News

zapharyesterday at 10:55 PM0 repliesview on HN

presumably you control the urls you are sending in the email. As a result if you want to use query strings that's fine. The issue only arises when you use query strings to implement tracking on someone else's site instead.