From a133a4b57bd0b628395f776a8d61745d97c7d042 Mon Sep 17 00:00:00 2001 From: Bjarke Berg Date: Tue, 19 Sep 2023 10:22:42 +0200 Subject: [PATCH] We need to explicty call UseAntiforgery, otherwise it is called automatically before our middleware that will lead to UmbracoRouteValueTransformer being called instead of static file middleware. --- .../ApplicationBuilder/UmbracoApplicationBuilder.cs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs b/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs index d489b658f0..5e079ccd30 100644 --- a/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs +++ b/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs @@ -89,6 +89,8 @@ public class UmbracoApplicationBuilder : IUmbracoApplicationBuilder, IUmbracoEnd AppBuilder.UseAuthentication(); AppBuilder.UseAuthorization(); + AppBuilder.UseAntiforgery(); + // This must come after auth because the culture is based on the auth'd user AppBuilder.UseRequestLocalization();