Hi tomglynch

We are Typeform's security team and we want to let you know that we are aware of this issue and are actively working on finding a solution. This is a core functionality of the platform, and we need time to find the best solution without breaking the user experience.

We take security seriously and we review every single report we get to try to find the best possible solution.

Regards!

hi tf_security. It's been more than 4 months since I reported this. Regardless if it is a core functionality or not, this is too long.