This is allowed starting from fc661ee13a ("core: allow URL parameters and POST bodies to co-exist"), which landed in Etherpad 1.8.0. For the discussion, see issue #3568.
fc661ee13a