Twitter's t.co links seem to mitigate this by issuing a 301 to the actual link thus fixing the `window.opener.location` vulnerability.

I wonder if the reasons for implementing this are related or just good riddance :)