The only thing I would caution about using referrer and a message, is that I've seen sites that blindly post whatever is in the query. So savvy people can do:
/+notification/?message=Marry+Me+Susan&destination=/bugs/12345
(obviously there are more abusive things that could be sent as a message)
I think using pre-canned message ids, or maybe just a white list of allowed texts would be a reasonable way around it.
The only thing I would caution about using referrer and a message, is that I've seen sites that blindly post whatever is in the query. So savvy people can do:
/+notification/ ?message= Marry+Me+ Susan&destinati on=/bugs/ 12345
(obviously there are more abusive things that could be sent as a message)
I think using pre-canned message ids, or maybe just a white list of allowed texts would be a reasonable way around it.