Salesforce reported that there is no evidence of real-world exploitation of Salesbleed, and has switched to spec-compliant URL parsing and centralized URL checking, and now requires user confirmation for certain Slack operations.