Avoid passing the current_user.id when commenting
authorAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
committerAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
commit980422533d315d623c0a880721e0f8a91c5ec19f
tree635cc06cf834d1d807707f1df342fd5ad543b3a8
parent3e4255eb2cc9f8b260ecab6d80c783723cf89d88
Avoid passing the current_user.id when commenting

Doing so doesn't appear to be necessary, and it opens up a spoofing
hole if it's actually used.
app/views/issues/_comments.html.erb