There is an attribute (allow_prefill_from_GET_request) you can set to allow this. See full discussion on the thread below:
Plone Foundation Code of Conduct