• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

tito10047 / php-calendar
89%
main: 87%

Build:
Build:
LAST BUILD BRANCH: 2.0.0-beta-4
DEFAULT BRANCH: main
Repo Added 11 Nov 2024 04:19PM UTC
Token hqoAkxRoYZjd0YFSS2cPmIk570klwpIvg regen
Build 68 Last
Files 50
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH 2.0.0-beta-4
branch: SELECT
CHANGE BRANCH
x
Sync Branches
  • No branch selected
  • 1.1.0
  • 2.0.0-beta-2
  • 2.0.0-beta-4
  • claude/gifted-mayer-dt5ag9
  • extra-data
  • feature-2
  • feature-caldav-server
  • feature/v2-roadmap
  • main
  • nova_registracia
  • quality/step-zero
  • v2.0.0-beta.1

26 Sep 2026 06:49AM UTC coverage: 88.579% (+20.2%) from 68.421%
36228307521

Pull #5

github

tito10047
fix(caldav): an encoded slash belongs to the segment it sits in

segmentsOf() decoded the whole path and then split on "/", so a "%2f"
inside a segment became a delimiter and one segment silently became two
— and with a framework router in front that has already decoded once,
"%252f" does the same. RFC 3986 reads the other way round: a slash
delimits only when it is not percent-encoded.

Split first, decode each segment after. Nothing in this router addresses
anything positional or file-shaped today, so it was latent rather than
exploitable; it is the class of bug that stops being latent the moment a
segment starts naming a path.
Pull Request #5: Feature caldav server

1988 of 2241 new or added lines in 34 files covered. (88.71%)

1 existing line in 1 file now uncovered.

2032 of 2294 relevant lines covered (88.58%)

14.13 hits per line

Relevant lines Covered
Build:
Build:
2294 RELEVANT LINES 2032 COVERED LINES
14.13 HITS PER LINE
Source Files on main
  • Tree
  • List 50
  • Changed 7
  • Source Changed 0
  • Coverage Changed 7
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
36228307521 2.0.0-beta-4 fix(caldav): an encoded slash belongs to the segment it sits in segmentsOf() decoded the whole path and then split on "/", so a "%2f" inside a segment became a delimiter and one segment silently became two — and with a framework router in front t... Pull #5 26 Sep 2026 07:57AM UTC tito10047 github
88.58
36228306250 feature-caldav-server fix(caldav): an encoded slash belongs to the segment it sits in segmentsOf() decoded the whole path and then split on "/", so a "%2f" inside a segment became a delimiter and one segment silently became two — and with a framework router in front t... Pull #5 26 Sep 2026 07:57AM UTC tito10047 github
88.58
36178737634 feature-caldav-server feat(caldav): answer PROPPATCH, and the properties stricter clients ask for Apple Calendar writes the colour and the display name back while setting an account up. The answer is no, but it has to be a WebDAV answer: a 405 aborts the setup, a 207 ... Pull #5 25 Sep 2026 07:17PM UTC tito10047 github
88.4
36177786867 feature-caldav-server fix(ical): unescape text when parsing A DESCRIPTION arrives as one line with \n where the newlines were and with commas and semicolons backslashed. Handing that through unchanged means a note comes back with visible backslashes and a line break t... Pull #5 25 Sep 2026 07:08PM UTC tito10047 github
88.39
36177376794 feature-caldav-server feat(caldav): let a store refuse one write with 403 A collection can be writable in general and still have resources a client must not touch — an entry it did not create, or a date outside a window the application enforces. ForbiddenException thr... Pull #5 25 Sep 2026 07:04PM UTC tito10047 github
88.33
36174705274 feature-caldav-server feat(caldav): discovery, several collections per account, getctag K4 and K5. CalDavRouter serves the whole tree of one account — root, principal, calendar home, the calendars under it and their events — so a client is handed one address and finds... Pull #5 25 Sep 2026 06:38PM UTC tito10047 github
88.29
36168568819 feature-caldav-server fix(caldav): keep UTF-8 in multistatus output and @ in event hrefs Loading the multistatus root without an XML declaration left the document with no encoding, so saveXML() turned every non-ASCII character into a numeric entity — a calendar named ... Pull #5 25 Sep 2026 05:40PM UTC tito10047 github
87.94
36167712149 feature-caldav-server feat(caldav): all-day events, real PROPFIND, consistent ETags, DOM filters K1 — ICalEvent::$allDay, DTSTART;VALUE=DATE on export with an exclusive DTEND, parser recognises DATE values and no longer leaks the current time into a date-only DTSTART.... Pull #5 25 Sep 2026 05:32PM UTC tito10047 github
87.94
36102039016 claude/gifted-mayer-dt5ag9 Merge 538d970db into d8d25b2a3 Pull #6 25 Sep 2026 06:15AM UTC web-flow github
88.66
36099002753 claude/gifted-mayer-dt5ag9 Update README and docs to the reviewed API Fix examples that did not match the code (load(): static, limitTo(), AgendaGroup API, WeekStart in CalendarConfig, placeholder helpers) and document the new behaviour, security notes and an upgrade guide... push 25 Sep 2026 05:32AM UTC claude github
88.66
See All Builds (53)

Badge your Repo: php-calendar

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc