Don't think so.

I'm just showing you how to abuse that without doing much ;)

Seen such behavior on both local ISPs and an Information Security conference website. Its one of those things that should not be there but every now and then some webdev decides to include ;)