A public write-up of a customer incident: an export link created for a vendor stayed valid for eleven months. What we changed in the product afterwards.