lsm/Orchard
1
0
Fork 0
mirror of https://github.com/OrchardCMS/Orchard.git synced 2026-02-09 09:16:41 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix intermittent "Validation of viewstate MAC failed" YSOD

Browse Source 
--HG--
branch : dev
This commit is contained in:
Renaud Paquay
2010-08-06 13:54:27 -07:00
parent 3265d1aea7
commit 8b2065579b
2 changed files with 35 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
src/Orchard/Mvc/Html/HtmlHelperExtensions.cs
View File

@@ -350,7 +350,38 @@ namespace Orchard.Mvc.Html {
public static MvcHtmlString AntiForgeryTokenOrchard(this HtmlHelper htmlHelper) {
var siteSalt = htmlHelper.Resolve<ISiteService>().GetSiteSettings().SiteSalt;
return htmlHelper.AntiForgeryToken(siteSalt);
try {
return htmlHelper.AntiForgeryToken(siteSalt);
}
catch(System.Web.Mvc.HttpAntiForgeryException e) {
// Work-around an issue in MVC 2: If the browser sends a cookie that is not
// coming from this server (this can happen if the user didn't close their browser
// while the application server configuration changed), clear it up
// so that a new one is generated and sent to the browser. This is harmless
// from a security point of view, since we are _issuing_ an anti-forgery token,
// not validating input.
// Remove the token so that MVC will create a new one.
var antiForgeryTokenName = htmlHelper.GetAntiForgeryTokenName();
htmlHelper.ViewContext.HttpContext.Request.Cookies.Remove(antiForgeryTokenName);
// Try again
return htmlHelper.AntiForgeryToken(siteSalt);
}
}
private static string GetAntiForgeryTokenName(this HtmlHelper htmlHelper) {
// Generate the same cookie name as MVC
var appPath = htmlHelper.ViewContext.HttpContext.Request.ApplicationPath;
const string antiForgeryTokenName = "__RequestVerificationToken";
if (string.IsNullOrEmpty(appPath)) {
return antiForgeryTokenName;
}
return antiForgeryTokenName + '_' + Base64EncodeForCookieName(appPath);
}
private static string Base64EncodeForCookieName(string s) {
return Convert.ToBase64String(Encoding.UTF8.GetBytes(s)).Replace('+', '.').Replace('/', '-').Replace('=', '_');
}
#endregion

4
src/Orchard/Mvc/Html/MvcFormAntiForgeryPost.cs
View File

@@ -10,7 +10,9 @@ namespace Orchard.Mvc.Html {
}
protected override void Dispose(bool disposing) {
_htmlHelper.ViewContext.Writer.Write(_htmlHelper.AntiForgeryTokenOrchard());
if (disposing) {
_htmlHelper.ViewContext.Writer.Write(_htmlHelper.AntiForgeryTokenOrchard());
}
base.Dispose(disposing);
}