The C standard isn't the only thing compilers have to comply with.

HTTP doesn't specify what happens if the request method is XYZZY. An HTTP server that confirms to the HTTP specification (but not the laws of physics) could make demons fly out of your nose when receiving a request with a method of XYZZY. But nobody complains about that.