Is this a security hole, or working as designed?

Printable View