]> git.openstreetmap.org Git - rails.git/commit
projects / rails.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3e4255e) | patch
Avoid passing the current_user.id when commenting
authorAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
committerAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
commit980422533d315d623c0a880721e0f8a91c5ec19f
tree635cc06cf834d1d807707f1df342fd5ad543b3a8tree | snapshot
parent3e4255eb2cc9f8b260ecab6d80c783723cf89d88commit | diff
Avoid passing the current_user.id when commenting

Doing so doesn't appear to be necessary, and it opens up a spoofing
hole if it's actually used.
app/views/issues/_comments.html.erb diff | blob | history
The OpenStreetMap web site