Neither is it validation when you use JS if the server doesn't check it. You can always send requests with postman, curl or your tool of choice.