From 43c426b46c2280793994c2fa23b2628a2c20d63e Mon Sep 17 00:00:00 2001 From: Shannon Date: Fri, 24 Jan 2014 12:36:02 +1100 Subject: [PATCH] Update booting.aspx Throw the exception immediately if the parameter is not there or empty. If the parameter is not there it's defaulted to the current url, and this will redirect to itself and create an endless loop here. --- src/Umbraco.Web.UI/config/splashes/booting.aspx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Umbraco.Web.UI/config/splashes/booting.aspx b/src/Umbraco.Web.UI/config/splashes/booting.aspx index 267e36b369..1bea61f89d 100644 --- a/src/Umbraco.Web.UI/config/splashes/booting.aspx +++ b/src/Umbraco.Web.UI/config/splashes/booting.aspx @@ -2,7 +2,7 @@ <% // NH: Adds this inline check to avoid a simple codebehind file in the legacy project! - if (!umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri)) + if (Request["url"].ToLower().Contains("booting.aspx") || !umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri)) { throw new ArgumentException("Can't redirect to the requested url - it's not local or an approved proxy url", "url");