[stable25] fix(dav): Restrict properties allowed object classes · nextcloud/server@4db1243

Triggered via pull request October 20, 2025 10:22

come-nc

synchronize #55859

backport/55856/stable25

Status Success

Total duration 2m 31s

Artifacts –

psalm-security.yml

on: pull_request

11 errors

This version of the CodeQL Action was deprecated on January 18th, 2023, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v2. For more information, see https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/

Psalm: lib/base.php#L205

Detected tainted header (see https://psalm.dev/256)

Psalm: lib/base.php#L205

Detected tainted header (see https://psalm.dev/256)

Psalm: apps/theming/lib/IconBuilder.php#L235

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/theming/lib/IconBuilder.php#L137

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/files_sharing/lib/Controller/ShareController.php#L685

Detected tainted cookie (see https://psalm.dev/257)

Psalm: apps/files_external/lib/Lib/Storage/SFTP.php#L399

Detected tainted file handling (see https://psalm.dev/255)