yv01p/Umbraco-CMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

If httpContext.GetCurrentRequestIpAddress is called with a spoofed HTTP context then IP returns null

Browse Source
This commit is contained in:
Richard Ockerby
2020-05-30 23:18:56 +01:00
committed by Sebastiaan Janssen
parent 9829d4abef
commit 8af1e2bcf3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/Umbraco.Core/Compose/AuditEventsComponent.cs
View File

@@ -68,7 +68,7 @@ namespace Umbraco.Core.Compose
{
var httpContext = HttpContext.Current == null ? (HttpContextBase) null : new HttpContextWrapper(HttpContext.Current);
var ip = httpContext.GetCurrentRequestIpAddress();
if (ip.ToLowerInvariant().StartsWith("unknown")) ip = "";
if (ip == null || ip.ToLowerInvariant().StartsWith("unknown")) ip = "";
return ip;
}
}