fix: deactivate user timezone after serving request

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

vulnerabilities/middleware/timezone.py

@@ -17,14 +17,18 @@ def __init__(self, get_response):
         self.get_response = get_response
 
     def __call__(self, request):
-        try:
-            # Activate local timezone for user using cookies
-            tzname = request.COOKIES.get("user_timezone")
-            if tzname:
+        tzname = request.COOKIES.get("user_timezone")
+        if tzname:
+            try:
                 timezone.activate(zoneinfo.ZoneInfo(tzname))
-            else:
+            except Exception as e:
                 timezone.deactivate()
-        except Exception as e:
+        else:
+            timezone.deactivate()
+
+        try:
+            response = self.get_response(request)
+        finally:
             timezone.deactivate()
 
-        return self.get_response(request)
+        return response