From 190c11c1847cf5919abc8589df959fc285bb43fd Mon Sep 17 00:00:00 2001
From: Glandos <bugs-github@antipoul.fr>
Date: Tue, 21 Dec 2021 22:30:43 +0100
Subject: [PATCH] check that language is in the supported list

fix #970
---
 ihatemoney/web.py | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/ihatemoney/web.py b/ihatemoney/web.py
index d9e7ec08..7f986ee5 100644
--- a/ihatemoney/web.py
+++ b/ihatemoney/web.py
@@ -818,8 +818,11 @@ def edit_bill(bill_id):
 
 @main.route("/lang/<lang>")
 def change_lang(lang):
-    session["lang"] = lang
-    session.update()
+    if lang in current_app.config["SUPPORTED_LANGUAGES"]:
+        session["lang"] = lang
+        session.update()
+    else:
+        flash(_(f"{lang} is not a supported language"), category="warning")
 
     return redirect(request.headers.get("Referer") or url_for(".home"))