Why is a request like this even possible?