From 4a8a09c78aa20f08c7ae94a8af2c7fbaa73d83ee Mon Sep 17 00:00:00 2001 From: markvantilburg Date: Mon, 13 Jan 2014 11:33:24 +0100 Subject: [PATCH] Update booting.aspx Throw the exception immediately if the parameter is not there or empty. If the parameter is not there it's defaulted to the current url, and this will redirect to itself and create an endless loop here. --- src/Umbraco.Web.UI/config/splashes/booting.aspx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Umbraco.Web.UI/config/splashes/booting.aspx b/src/Umbraco.Web.UI/config/splashes/booting.aspx index 267e36b369..1bea61f89d 100644 --- a/src/Umbraco.Web.UI/config/splashes/booting.aspx +++ b/src/Umbraco.Web.UI/config/splashes/booting.aspx @@ -2,7 +2,7 @@ <% // NH: Adds this inline check to avoid a simple codebehind file in the legacy project! - if (!umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri)) + if (Request["url"].ToLower().Contains("booting.aspx") || !umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri)) { throw new ArgumentException("Can't redirect to the requested url - it's not local or an approved proxy url", "url");