[Bug web/43011] Upgrade gcc.gnu.org/bugzilla to Bugzilla 3.4.5

[LpSolit at netscape dot net]

------- Comment #14 from LpSolit at netscape dot net  2010-02-10 00:29 -------
(In reply to comment #13)
> Email replies get 
> body and attachments automatically entered in the relevant bug, with an 
> account created for the sender if they didn't already have one.  If you 
> preserve that, most of the important email handling functionality is 
> there.

Is there any check that the email sender is really the one he pretends to be?
It's easy to hack the From: header of emails from the email client and
impersonate another user (e.g. to gain privileges).


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=43011