From 993adfe395b80bba331e26fda156688a29eaf93e Mon Sep 17 00:00:00 2001 From: Josh Date: Thu, 27 Aug 2026 10:44:55 -0400 Subject: [PATCH 1/5] fix(settings): Sharing regex Signed-off-by: Josh --- apps/settings/lib/Settings/Admin/Sharing.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/settings/lib/Settings/Admin/Sharing.php b/apps/settings/lib/Settings/Admin/Sharing.php index fdc3ba9b9f311..e560fce0b2bc6 100644 --- a/apps/settings/lib/Settings/Admin/Sharing.php +++ b/apps/settings/lib/Settings/Admin/Sharing.php @@ -121,7 +121,7 @@ public function getPriority() { #[\Override] public function getAuthorizedAppConfig(): array { return [ - 'core' => ['/shareapi_.*/'], + 'core' => ['/^shareapi_.*$/'], ]; } From 1f2c5fa1d9a67ec5f3e33909d57bf526b937e7f8 Mon Sep 17 00:00:00 2001 From: Josh Date: Thu, 27 Aug 2026 10:49:12 -0400 Subject: [PATCH 2/5] fix(settings): drop unnecessary CalDAVSettings regex Signed-off-by: Josh --- apps/dav/lib/Settings/CalDAVSettings.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/dav/lib/Settings/CalDAVSettings.php b/apps/dav/lib/Settings/CalDAVSettings.php index 41129665004a1..ae68dfe5b3d2c 100644 --- a/apps/dav/lib/Settings/CalDAVSettings.php +++ b/apps/dav/lib/Settings/CalDAVSettings.php @@ -80,7 +80,7 @@ public function getName(): ?string { #[\Override] public function getAuthorizedAppConfig(): array { return [ - 'dav' => ['/(' . implode('|', array_keys(self::defaults)) . ')/'] + 'dav' => array_keys(self::defaults), ]; } } From cc0441ffe0ff60b8120a1641c4a7419a3c2ad31c Mon Sep 17 00:00:00 2001 From: Josh Date: Thu, 27 Aug 2026 11:04:14 -0400 Subject: [PATCH 3/5] chore(settings): drop unused delegated mail config key `mail_general_settings` is a historical HTML fragment identifier used to link to the email server settings. It is not a core app config key and therefore does not belong in `getAuthorizedAppConfig()`. Email server settings use system configuration and are authorized through their dedicated settings controller. Signed-off-by: Josh --- apps/settings/lib/Settings/Admin/Server.php | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/apps/settings/lib/Settings/Admin/Server.php b/apps/settings/lib/Settings/Admin/Server.php index 51f05ca56485c..5f1b8a8bd1a50 100644 --- a/apps/settings/lib/Settings/Admin/Server.php +++ b/apps/settings/lib/Settings/Admin/Server.php @@ -110,10 +110,6 @@ public function getName(): ?string { #[\Override] public function getAuthorizedAppConfig(): array { - return [ - 'core' => [ - '/mail_general_settings/', - ], - ]; + return []; } } From 4e3803a1bd56eb6f966d6acc31171bffd215c9e3 Mon Sep 17 00:00:00 2001 From: Josh Date: Thu, 27 Aug 2026 11:12:06 -0400 Subject: [PATCH 4/5] fix(sharebymail): authorize delegated settings by exact keys Replace the invalid regex-like app config entry with explicit keys for sendpasswordmail and replyToInitiator. Signed-off-by: Josh --- apps/sharebymail/lib/Settings/Admin.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/apps/sharebymail/lib/Settings/Admin.php b/apps/sharebymail/lib/Settings/Admin.php index c9e997a774356..74242c9e35641 100644 --- a/apps/sharebymail/lib/Settings/Admin.php +++ b/apps/sharebymail/lib/Settings/Admin.php @@ -64,7 +64,10 @@ public function getName(): ?string { #[\Override] public function getAuthorizedAppConfig(): array { return [ - 'sharebymail' => ['s/(sendpasswordmail|replyToInitiator)/'], + 'sharebymail' => [ + 'sendpasswordmail', + 'replyToInitiator', + ], ]; } } From f6240b3861123ebf0c4ce649e67c90626687b275 Mon Sep 17 00:00:00 2001 From: Josh Date: Thu, 27 Aug 2026 11:25:17 -0400 Subject: [PATCH 5/5] chore(theming): clearer settings app config regex Better match intent; no practical operational change today. Signed-off-by: Josh --- apps/theming/lib/Settings/Admin.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/theming/lib/Settings/Admin.php b/apps/theming/lib/Settings/Admin.php index 6a05beae10ef0..4b7148a0fdbf7 100644 --- a/apps/theming/lib/Settings/Admin.php +++ b/apps/theming/lib/Settings/Admin.php @@ -115,7 +115,7 @@ public function getName(): ?string { #[\Override] public function getAuthorizedAppConfig(): array { return [ - Application::APP_ID => '/.*/', + Application::APP_ID => '/^.*$/', ]; } }