From 96397adf1f97c3cb1fafa6f9a2b44f2afe75ba63 Mon Sep 17 00:00:00 2001
From: Bjarke Berg <mail@bergmania.dk>
Date: Tue, 19 Sep 2023 10:21:32 +0200
Subject: [PATCH 1/2] UseDeveloperExceptionPage is called automatically in
 minimal hosting model

---
 src/Umbraco.Web.UI/Program.cs | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/src/Umbraco.Web.UI/Program.cs b/src/Umbraco.Web.UI/Program.cs
index 780ac4d53e..ce23e48ff6 100644
--- a/src/Umbraco.Web.UI/Program.cs
+++ b/src/Umbraco.Web.UI/Program.cs
@@ -11,11 +11,6 @@ WebApplication app = builder.Build();
 
 await app.BootUmbracoAsync();
 
-if (app.Environment.IsDevelopment())
-{
-    app.UseDeveloperExceptionPage();
-}
-
 #if (UseHttpsRedirect)
 app.UseHttpsRedirection();
 #endif

From a133a4b57bd0b628395f776a8d61745d97c7d042 Mon Sep 17 00:00:00 2001
From: Bjarke Berg <mail@bergmania.dk>
Date: Tue, 19 Sep 2023 10:22:42 +0200
Subject: [PATCH 2/2] We need to explicty call UseAntiforgery, otherwise it is
 called automatically before our middleware that will lead to
 UmbracoRouteValueTransformer being called instead of static file middleware.

---
 .../ApplicationBuilder/UmbracoApplicationBuilder.cs             | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs b/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs
index d489b658f0..5e079ccd30 100644
--- a/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs
+++ b/src/Umbraco.Web.Common/ApplicationBuilder/UmbracoApplicationBuilder.cs
@@ -89,6 +89,8 @@ public class UmbracoApplicationBuilder : IUmbracoApplicationBuilder, IUmbracoEnd
         AppBuilder.UseAuthentication();
         AppBuilder.UseAuthorization();
 
+        AppBuilder.UseAntiforgery();
+
         // This must come after auth because the culture is based on the auth'd user
         AppBuilder.UseRequestLocalization();