Maarten

Security Vulnerability "/_data_/…/storage/cfg/…/…/accounts"

1

**RainLoop version, browser, OS:** v1.16 **Expected behavior:** File can't be decrypted on (backup) server. **actual behavior:** File can be decrypted on (backup) server. **Steps to reproduce the problem:** When calling...

When using the "remember me" feature it will store the login data on the server in a file. `/_data_/_default_/storage/cfg/…/…/sign_me` This file is encrypted using the APP_SALT and 'rltoken cookie'. The...

I know about this issue: https://github.com/msgpack/msgpack-php/issues/18 But would it be wise to use [PHP's jsonSerialize()](http://php.net/JsonSerializable)? And have an option in unpack() to convert associative array's to stdClass like json_decode($data, bool...

Please provide the following details for error reports from https://apps.nextcloud.com/. Ignore in case of a feature request. ## Details * Browser and browser version: Firefox 104.0.2 CSRF on HTTP_REFERER should...

Please provide the following details for error reports from https://apps.nextcloud.com/. Ignore in case of a feature request. ## Details * Browser and browser version: Chromium 106 ## JavaScript Console Output...

Invalid vCard date-time string

2

[DateTimeParser.php](https://github.com/sabre-io/vobject/blob/master/lib/DateTimeParser.php) Replace `Z | (?: \+|-)(?: [0-9]{2}:[0-9]{2})` Into `Z | (?: \+|-)(?: [0-9]{2}:?[0-9]{2})` Because some timezone entries are without the `:`

Text Property `strtr(): Argument #1 ($string) must be of type string, array given`

2

KDE KAddressBook has `` to select which kind of email encryptions are allowed for the contact. ```xml PGP/INLINE PGP/MIME S/MIME S/MIMEOpaque Never Always ``` When `VCard->validate()` is called, `Sabre\VObject\Property\Text::getRawMimeDirValue()` throws...

Firefox wrong Range from proto.getSelection

1

When typing in Firefox and then calling an action like Squire.bold() the cursor jumps and causes action on the wrong place. This is because the wrong Range is used. Replace...

isOrContains travels throught the nodes the old way. These days we have Node.contains (even in IE9+) https://developer.mozilla.org/en-US/docs/Web/API/Node/contains

There's no need for the every(nodeList) function while we have Array.prototype.every.