refactor: enable request validation

[deepsource-dev-autofix]

This PR restores ASP.NET request validation by updating the web.config and cleans up indentation in the culture list.

• No Request Validation: Previously, validateRequest was set to false, which disables built-in protection against malicious input (such as script tags or HTML injections). This change sets validateRequest to true, re-enabling automatic request validation to help prevent XSS and other injection attacks.

Security configuration added:

• We updated <pages validateRequest="true" ...> in the web.config. This configuration ensures that ASP.NET will automatically scan incoming requests for potentially dangerous content and block them if found. It is necessary to maintain defense-in-depth against cross-site scripting and related threats.

Assumptions:

• We assume no existing functionality depends on disabled request validation. Please review any custom handlers or legacy code that may rely on validateRequest="false", and adjust or whitelist input as needed.

This Autofix was generated by AI. Please review the change before merging.

[deepsource-io]

Here's the code health analysis summary for commits 7184030..d74a7c0. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
C#	❌ Failure		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.