Description:

Fixes #20960

This PR disables the CSRF check for the languages manager saveLanguage controller method if it is detected that an update is in progress, this allows the language to be changed on the update screen. A similar exclusion already exists for installation.

I tried adding the language=xxx URL parameter to the updater URL and reloading the page instead of calling saveLanguage, but this only works for the initial updater page and since the language is not saved in the session then subsequent updater pages are not shown in the chosen language.

Review

• Functional review done
• Potential edge cases thought about (behavior of the code with strange input, with strange internal state or possible interactions with other Matomo subsystems)
• Usability review done (is anything maybe unclear or think about anything that would cause people to reach out to support)
• Security review done
• Wording review done
• Code review done
• Tests were added if useful/possible
• Reviewed for breaking changes
• Developer changelog updated if needed
• Documentation added if needed
• Existing documentation updated if needed