https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Pri...
Although, the Google test on that particular page is currently not working.