fix: CalDAV sync broken by SSRF hostname replacement (#19291)

/closes #19272
2026-04-03 13:45:59 +05:30
parent baa4fda3d2
commit c521ba29be
3 changed files with 57 additions and 13 deletions
@@ -26,9 +26,10 @@ export class CalDavClientProvider {
      throw new Error('Missing required CalDAV connection parameters');
    }

-    const serverUrl = await this.secureHttpClientService.getValidatedUrl(
+    await this.secureHttpClientService.getValidatedHost(
      connectedAccount.connectionParameters.CALDAV.host,
    );
+    const serverUrl = connectedAccount.connectionParameters.CALDAV.host;

    return new CalDAVClient({
      username: