the client-side checks by modifying values after the checks have been performed, or
by changing the client to remove the client-side checks entirely. Then, these modified
values would be submitted to the server.
When the set of acceptable objects, such as filenames or URLs, is limited or known,