Bypassing client-side controls