This is a brain dead, nothing accusation, perpetrated by a nobody that wanted to get their name (and their nobody "security consulting" company's name) in the headlines. This is indeed NOT a bug. This is absolutely a common, well-known, well understood, and well documented feature that does not...