Merge pull request #46603 from nextcloud/backport/46593/stable28

[stable28] fix(caldav): Throw 403 Forbidden Error instead of 500 Internal Server…
nextcloud · Jul 18, 2024 · 1dd731d · 1dd731d
2 parents 6253c26 + 4ee1527
commit 1dd731d
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/apps/dav/lib/CalDAV/CalDavBackend.php b/apps/dav/lib/CalDAV/CalDavBackend.php
@@ -99,6 +99,7 @@
 use Sabre\VObject\Property;
 use Sabre\VObject\Reader;
 use Sabre\VObject\Recur\EventIterator;
+use Sabre\VObject\Recur\NoInstancesException;
 use function array_column;
 use function array_map;
 use function array_merge;
@@ -3011,7 +3012,15 @@ public function getDenormalizedData(string $calendarData): array {
 					$lastOccurrence = $firstOccurrence;
 				}
 			} else {
-				$it = new EventIterator($vEvents);
+				try {
+					$it = new EventIterator($vEvents);
+				} catch (NoInstancesException $e) {
+					$this->logger->debug('Caught no instance exception for calendar data. This usually indicates invalid calendar data.', [
+						'app' => 'dav',
+						'exception' => $e,
+					]);
+					throw new Forbidden($e->getMessage());
+				}
 				$maxDate = new DateTime(self::MAX_DATE);
 				$firstOccurrence = $it->getDtStart()->getTimestamp();
 				if ($it->isInfinite()) {