Steps to reproduce
- Have the
end_to_end_encryption app enabled on a Nextcloud instance, but with no folder actually marked/used as end-to-end encrypted (fresh/default install state — allowed_groups is empty, no E2EE mnemonic ever set up for any user).
- The app auto-updates (or is installed) at version 2.2.2.
- Log in as any user and open the Files app (or any action that triggers a
PROPFIND against /remote.php/dav/files/{user}/).
Expected behavior
The Files app loads the folder listing normally, exactly as it did before the app was enabled/updated (since the folder in question contains zero encrypted content).
Actual behavior
Every folder listing fails. The Files app shows a toast:
Unexpected error: Invalid response: No root multistatus found
Full console error:
[ERROR] end_to_end_encryption: Error in PROPFIND interceptor
Object { app: "end_to_end_encryption", uid: "<user>", level: 2, error: Error, request: Request }
app: "end_to_end_encryption"
error: Error: Invalid response: No root multistatus found
level: 2
request: Request { method: "PROPFIND", url: "https://<instance>/remote.php/dav/files/<user>/", referrer: "about:client", … }
uid: "<user>"
Followed by a secondary error from Files itself:
[ERROR] files: Error while fetching content
Object { app: "files", uid: "<user>", level: 2, error: Error }
This breaks every PROPFIND-based folder listing across the instance (not just for E2EE-enabled folders), effectively making the Files app unusable while the app is enabled — reproducible in a fresh private-browsing session, so not a session/cache issue.
Workaround
occ app:disable end_to_end_encryption immediately resolves the issue (folder listings work normally again). No encrypted content is lost since none existed.
Suspected cause
Version 2.2.2 was released the same day this started (per the in-app changelog), and includes:
The client-side PROPFIND interceptor (registered globally for all PROPFIND requests, not just ones touching encrypted content) appears to fail parsing/re-serializing the WebDAV multistatus response in this specific "app enabled, nothing actually encrypted" configuration — possibly an edge case not covered by the PROPFIND fixes in this release.
Environment
- Nextcloud: 33.0.7.1
- end_to_end_encryption: 2.2.2
- Browser: Firefox (reproduced in private browsing, ruling out cache/extensions)
occ config:app:get end_to_end_encryption allowed_groups → [] (never configured for any group)
Steps to reproduce
end_to_end_encryptionapp enabled on a Nextcloud instance, but with no folder actually marked/used as end-to-end encrypted (fresh/default install state —allowed_groupsis empty, no E2EE mnemonic ever set up for any user).PROPFINDagainst/remote.php/dav/files/{user}/).Expected behavior
The Files app loads the folder listing normally, exactly as it did before the app was enabled/updated (since the folder in question contains zero encrypted content).
Actual behavior
Every folder listing fails. The Files app shows a toast:
Full console error:
Followed by a secondary error from Files itself:
This breaks every
PROPFIND-based folder listing across the instance (not just for E2EE-enabled folders), effectively making the Files app unusable while the app is enabled — reproducible in a fresh private-browsing session, so not a session/cache issue.Workaround
occ app:disable end_to_end_encryptionimmediately resolves the issue (folder listings work normally again). No encrypted content is lost since none existed.Suspected cause
Version 2.2.2 was released the same day this started (per the in-app changelog), and includes:
fix(propfind): properly handle PROPFIND when only a child is e2ee([stable-2] fix(propfind): properly handle PROPFIND when only a child is e2ee #1940)fix: resolve type error in propfind plugin([stable-2] fix: resolve type error in propfind plugin #1988)fast-xml-parserto 5.10.1The client-side PROPFIND interceptor (registered globally for all
PROPFINDrequests, not just ones touching encrypted content) appears to fail parsing/re-serializing the WebDAVmultistatusresponse in this specific "app enabled, nothing actually encrypted" configuration — possibly an edge case not covered by the PROPFIND fixes in this release.Environment
occ config:app:get end_to_end_encryption allowed_groups→[](never configured for any group)