I feel like that was just an exploit waiting to happen. Showing a different URL than the page was delivered from.