quoting from Referer header: privacy and security concerns
For example, consider a "reset password" page with a social media link in a footer. If the link was followed, depending on how information was shared the social media site may receive the reset password URL and may still be able to use the shared information, potentially compromising a user's security.
I would like to ask what is the security concern in such case? If I would click on the social media link as described above, the social media site would receive only(?) the link for the password reset link but there shouldn't be any sensitive information like username or password since I did not provided them in the form or is the above scenario addressing a case when I'm already authenticated and access the password reset link and it "somehow" reveal for example my personal information ?
Could someone please explain or at least provide some information for further reading ?
Thanks a lot !