]> git.openstreetmap.org Git - rails.git/commitdiff
Avoid passing the current_user.id when commenting
authorAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
committerAndy Allan <git@gravitystorm.co.uk>
Wed, 2 Aug 2017 13:58:03 +0000 (14:58 +0100)
Doing so doesn't appear to be necessary, and it opens up a spoofing
hole if it's actually used.


No differences found