I'm guessing this security hole is a regression because I could have sworn I tried this before. But I don't remember for certain.