I think that's another example of bad filtering, same thing that happens if you accept an URL and don't disallow `file:///etc/passwd`.