Why does the web browser allow this?