From 63fbdc3bd5f52cd7af38d431d0a77445b91ee03e Mon Sep 17 00:00:00 2001 From: TekH Date: Thu, 12 Feb 2026 16:51:51 +0100 Subject: [PATCH] Validate culture cookie against supported languages Changed CultureMiddleware to check if the culture cookie value is in the list of supported languages, not just for null or empty. This ensures that only valid, supported culture values are accepted from the cookie; otherwise, the middleware falls back to Accept-Language or default logic. --- EnvelopeGenerator.Web/Middleware/CultureMiddleware.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/EnvelopeGenerator.Web/Middleware/CultureMiddleware.cs b/EnvelopeGenerator.Web/Middleware/CultureMiddleware.cs index ea3200e6..a11c9c9a 100644 --- a/EnvelopeGenerator.Web/Middleware/CultureMiddleware.cs +++ b/EnvelopeGenerator.Web/Middleware/CultureMiddleware.cs @@ -22,7 +22,7 @@ public class CultureMiddleware var cookieName = CookieRequestCultureProvider.DefaultCookieName; var cookieValue = context.Request.Cookies[cookieName]; - if (string.IsNullOrEmpty(cookieValue)) + if (!_cultures.Languages.Contains(cookieValue)) { var requestCulture = context.GetCultureByAcceptLanguage()?.Name; var culture = _cultures.GetOrDefault(requestCulture);