2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges.

For years, we have used tinyurl.com and other sites to shorten our URL