Merge remote-tracking branch 'origin/v13/dev' into v14/dev

src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs

@@ -91,6 +91,8 @@ public class UmbracoApplicationBuilder : IUmbracoApplicationBuilder, IUmbracoEnd
         AppBuilder.UseAuthentication();
         AppBuilder.UseAuthorization();
 
+        AppBuilder.UseAntiforgery();
+
         // This must come after auth because the culture is based on the auth'd user
         AppBuilder.UseRequestLocalization();
 

src/Umbraco.Web.UI/Program.cs

@@ -11,11 +11,6 @@ WebApplication app = builder.Build();
 
 await app.BootUmbracoAsync();
 
-if (app.Environment.IsDevelopment())
-{
-    app.UseDeveloperExceptionPage();
-}
-
 #if (UseHttpsRedirect)
 app.UseHttpsRedirection();
 #endif