Fix a possible exploit in asset caching