Good ideas and conversation. No ads, no tracking. Login or Take a Tour!
Web browsers will often send reset password urls as referers to sites you probably don't want them too.
Not all sites make this mistake. Who they send it to may be secure (or not).
There are browser add ons to modify the referer header to offer some protection, but can impede website function.