Well, it didn't take long.  Yesterday, Opera 9 came out, today there is a proof of concept for a long href denial of service exploit.  No word on when a patch will be available.