[boost] trac user spoofing

From: Frank Mori Hess (frank.hess_at_[hidden])
Date: 2007-10-15 11:14:39

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've noticed when submitting tickets on the boost trac, I can submit the 
ticket under my username when not logged in (in the input box for email 
address or username) and it never prompts for a password.  I think it should 
require login when using someone's boost username, to prevent the gremlins 
from impersonating people.

- -- 
Frank
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHE4Pg5vihyNWuA4URAnJlAJsFxZsP8TieXkgmKn/U4rDrg25QQwCcDNCa
G4aKyqvPLMqdFkjjAMa7/E8=
=d8IN
-----END PGP SIGNATURE-----