Users can submit a null value even if they set the required attribute using their browser developer tools. If the user opens the browser's developer tools, removes required, and submits, a null value is submitted. It's very easy for users with knowledge of browser developer tools. To prevent this, you need to add validation logic on the backend side.