[Bug]: Activity, Photos, updatenotifications, and other apps cause rendering issues/JS error for Safari 15

[mpivchev]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

A lot of apps are causing issues rendering the web app/broken functionality causes by JS errors on Safari 15.

updatenotifications is showing the following regex error:

[Error] SyntaxError: Invalid regular expression: invalid group specifier name
	(anonymous function) (updatenotification-init.js:1)
	promiseReactionJob

Meanwhile, the other affected apps are showing the following errors (thanks to @Antreesy for finding them). Seems like an issue with node_modules/mdast-util-gfm-autolink-literal which a lot of repos use:

stable29:

find ./stable29 -type f -name "package-lock.json" -exec grep -H "mdast
-util-gfm-autolink-literal-2.0.1" {} +
./stable29/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable29/apps-extra/photos/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable29/apps-extra/viewer/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable29/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable29/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",

stable30:

find ./stable30 -type f -name "package-lock.json" -exec grep -H "mdast
-util-gfm-autolink-literal-2.0.1" {} +
./stable30/apps-extra/activity/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable30/apps-extra/activity/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable30/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable30/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable30/apps-extra/text/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable30/apps-extra/text/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",

stable31:

find ./stable31 -type f -name "package-lock.json" -exec grep -H "mdast
-util-gfm-autolink-literal-2.0.1" {} +
./stable31/apps-extra/activity/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable31/apps-extra/activity/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable31/apps-extra/viewer/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable31/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
./stable31/apps-extra/password_policy/package-lock.json:      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",

Steps to reproduce

1. Try to log in with Safari 15
2. Observe missing frontend elements/ JS errors

Expected behavior

No frontend elements should be missing/ no JS errors

Nextcloud Server version

29

Operating system

None

PHP engine version

None

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

List of activated Apps

Nextcloud Signing status

Nextcloud Logs

Additional info

Partial fixes here: #51598 #52297

[skjnldsv]

#52627