I think the CGI "standard" is to be blamed. Whoever the f*ck had the briliant idea to alter the environment variables of a server child process through incomin

I think the CGI "standard" is to be blamed. Whoever the f*ck had the briliant idea to alter the environment variables of a server child process through incoming HTTP headers should have his browsers environment variables altered by the servers responses.