You mean call whatever server action the client asks? I don't think having this vulnerability was intentional.