It's been demonstrated in the past that server can detect the pipe to shell and modify content - timing attack, if I recall correctly