From 1a195cd4b690d00e9eccfdb74123ca42a8dcfcdd Mon Sep 17 00:00:00 2001
From: Kent Delante <kent@delante.me>
Date: Thu, 23 Apr 2026 22:51:07 +0800
Subject: [PATCH 1/2] fix(files): escape html entities in dav search requests

Signed-off-by: Kent Delante <kent@delante.me>

This fixes a 'xmlParseEntityRef: no name' error returned when
searching in files navigation while in folders with special characters
in the name.
---
 apps/files/src/services/WebDavSearch.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/files/src/services/WebDavSearch.ts b/apps/files/src/services/WebDavSearch.ts
index b3274b9ee8d61..71869f6628aa5 100644
--- a/apps/files/src/services/WebDavSearch.ts
+++ b/apps/files/src/services/WebDavSearch.ts
@@ -56,7 +56,7 @@ export async function searchNodes(query: string, { dir, signal }: SearchNodesOpt
 		 </d:select>
 		 <d:from>
 			 <d:scope>
-				 <d:href>/files/${user.uid}${dir || ''}</d:href>
+				 <d:href>/files/${user.uid}${dir ? escapeHTML(dir) : ''}</d:href>
 				 <d:depth>infinity</d:depth>
 			 </d:scope>
 		 </d:from>

From f0b16423e12080555405f71b3bb989fcdd2e49ed Mon Sep 17 00:00:00 2001
From: nextcloud-command <nextcloud-command@users.noreply.github.com>
Date: Thu, 30 Apr 2026 00:38:26 +0000
Subject: [PATCH 2/2] chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>