.Net server form authentication protection bypass

By using backslash in the request path it's possible to access protected file...