This "exploit" is months old actually, devs should be aware, but don't ask me why it's not fixed yet.