Update booting.aspx
Throw the exception immediately if the parameter is not there or empty. If the parameter is not there it's defaulted to the current url, and this will redirect to itself and create an endless loop here.
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
|
||||
<%
|
||||
// NH: Adds this inline check to avoid a simple codebehind file in the legacy project!
|
||||
if (!umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri))
|
||||
if (Request["url"].ToLower().Contains("booting.aspx") || !umbraco.cms.helpers.url.ValidateProxyUrl(Request["url"], Request.Url.AbsoluteUri))
|
||||
{
|
||||
throw new ArgumentException("Can't redirect to the requested url - it's not local or an approved proxy url",
|
||||
"url");
|
||||
|
||||
Reference in New Issue
Block a user