From 380b3688bdc7dd362215f68fcdb17b163831fbd8 Mon Sep 17 00:00:00 2001
From: raviks789 <raviks789@gmail.com>
Date: Mon, 28 Apr 2025 11:58:50 +0200
Subject: [PATCH] TimezoneDetect: Verify the timezone name cookie

---
 library/Icinga/Util/TimezoneDetect.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/library/Icinga/Util/TimezoneDetect.php b/library/Icinga/Util/TimezoneDetect.php
index 1dd203ea2..03d051366 100644
--- a/library/Icinga/Util/TimezoneDetect.php
+++ b/library/Icinga/Util/TimezoneDetect.php
@@ -3,6 +3,8 @@
 
 namespace Icinga\Util;
 
+use DateTimeZone;
+
 /**
  * Retrieve timezone information from cookie
  */
@@ -36,9 +38,11 @@ class TimezoneDetect
             return;
         }
 
-        if (array_key_exists(self::$cookieName, $_COOKIE)) {
+        if (in_array($_COOKIE[self::$cookieName] ?? null, DateTimeZone::listIdentifiers(), true)) {
             self::$timezoneName = $_COOKIE[self::$cookieName];
             self::$success = true;
+        } else {
+            self::$success = false;
         }
     }