diff --git a/src/Umbraco.Web/HttpRequestExtensions.cs b/src/Umbraco.Web/HttpRequestExtensions.cs
index 4071cf4d72..7e12a55ae9 100644
--- a/src/Umbraco.Web/HttpRequestExtensions.cs
+++ b/src/Umbraco.Web/HttpRequestExtensions.cs
@@ -17,7 +17,7 @@ namespace Umbraco.Web
///
///
///
- public static string GetCleanedItem(this HttpRequest request, string key)
+ public static string CleanForXss(this HttpRequest request, string key)
{
var item = request.GetItemAsString(key);
return item.CleanForXss();
diff --git a/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs b/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs
index f5784c16f1..09e3b1ee88 100644
--- a/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs
+++ b/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs
@@ -36,7 +36,7 @@ namespace umbraco.cms.presentation
{
if (_section == null)
{
- var qry = Request.GetCleanedItem("app");
+ var qry = Request.CleanForXss("app");
// Load dashboard content
if (qry.IsNullOrWhiteSpace() == false)
{
diff --git a/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs b/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs
index 8317f8ab5d..a938935d2b 100644
--- a/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs
+++ b/src/Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs
@@ -1,4 +1,5 @@
using Umbraco.Core.Logging;
+using Umbraco.Web;
namespace dashboardUtilities
{
@@ -32,10 +33,10 @@ namespace dashboardUtilities
{
var response = client.DownloadString(requestUri);
- if (!string.IsNullOrEmpty(response))
+ if (string.IsNullOrEmpty(response) == false)
{
Response.Clear();
- Response.ContentType = Request.QueryString["type"] ?? MediaTypeNames.Text.Xml;
+ Response.ContentType = Request.CleanForXss("type") ?? MediaTypeNames.Text.Xml;
Response.Write(response);
}
}
diff --git a/src/Umbraco.Web/umbraco.presentation/umbraco/developer/Cache/viewCacheItem.aspx.cs b/src/Umbraco.Web/umbraco.presentation/umbraco/developer/Cache/viewCacheItem.aspx.cs
index a78a8d24da..aafc9000b1 100644
--- a/src/Umbraco.Web/umbraco.presentation/umbraco/developer/Cache/viewCacheItem.aspx.cs
+++ b/src/Umbraco.Web/umbraco.presentation/umbraco/developer/Cache/viewCacheItem.aspx.cs
@@ -1,5 +1,6 @@
using System;
using System.Web;
+using Umbraco.Web;
using umbraco.BasePages;
namespace umbraco.cms.presentation.developer
@@ -17,7 +18,7 @@ namespace umbraco.cms.presentation.developer
protected void Page_Load(object sender, EventArgs e)
{
Panel1.Text = ui.Text("viewCacheItem");
- var cacheKey = Request.QueryString["key"];
+ var cacheKey = Request.CleanForXss("key");
LabelCacheAlias.Text = cacheKey;
var cacheItem = ApplicationContext.ApplicationCache.GetCacheItem