Added scheme to OutputCacheKey to prevent SSL bypass

Fixes #6850.
This commit is contained in:
Arjan Noordende
2016-05-05 21:01:06 +01:00
committed by Sébastien Ros
parent 018a3faa2e
commit 0ed5198cb3

View File

@@ -370,6 +370,9 @@ namespace Orchard.OutputCache.Filters {
foreach (var p in filterContext.ActionParameters)
result.Add("PARAM:" + p.Key, p.Value);
// Vary by scheme.
result.Add("scheme", filterContext.RequestContext.HttpContext.Request.Url.Scheme);
// Vary by theme.
result.Add("theme", _themeManager.GetRequestTheme(filterContext.RequestContext).Id.ToLowerInvariant());