Roughly two weeks ago, Facebook started adding a tracking parameter,
fbclid (Facebook click id?), to all external links users share. And I didn't like it so I'm hiding it.
I've reported Stored XSS vulnerability and it was triaged, fixed, tested and deployed in less than an hour. On Friday. Before Christmas.