I'm reviewing some code for a colleague and want to be sure about this before I raise it (office politics rubbish...)
Would it be possible for someone with malicious intent to alter the value of HttpContext.Current.User.Identity.Name from the client side?