Can't view or download a file when `(` and `[` are in the path

[cannorin]

In the Android app (version 1.0.0), one can't view files that contain both ( and [ in their path.

For example, the following paths are affected:

• ([.png
• [(.png
• (/[.png ([.png inside a directory named ()
• [/(.png ((.png inside a directory named [)

While the following paths are not affected:

• (.png
• [.png
• (/test.png (test.png inside a directory named ()
• [/test.png (test.png inside a directory named [)

[guruz]

Interesting. Does it work on desktop and iOS?
Which error are you getting?

[cannorin]

My Linux desktop client can upload and download it without error. I can also view and download it on the browser. So I guess the problem is purely on the Android client. Can't speak for iOS as I don't own one, sorry.

For the error, it just gets stuck at "Downloading..." with a 0% progress bar when I try to preview (/[.png. Also, it says "Sync failed" when I try to set (/[.png as available offline.

Also took adb logcat but turned out not to be very helpful:

• previewing (/test.png: preview_normal_image.txt
• trying to preview (/[.png: preview_broken_image.txt
• trying to set (/[.png as available offline: set_offline_broken_image.txt

For the reference, I used adb logcat -c && adb logcat --pid=$(adb shell pidof eu.opencloud.android). Also note that (/[.png and (/test.png are the same file.

[markussbk]

This might be related to the issue, but it seems that by using + in the file name also causes problems.
If I create a folder named Test + Test, then in webui and opencloud desktop app directory shows up correctly.
But in android app, I get message "Sync failed"

Using Davx5 app + WebDAV mount, the directory Test + Test shows up correctly.

Edit: here is what I see in caddy reverse proxy logs

for opencloud android app
{"level":"debug","ts":1772294579.853132,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"REDACTED:9200","duration":0.005876216,"request":{"remote_ip":"REDACTED","remote_port":"46617","client_ip":"REDACTED","proto":"HTTP/1.1","method":"PROPFIND","host":"cloud.example.com","uri":"/dav/spaces/REDACTED/Test/Test%20%20%20Test/","headers":{"Depth":["1"],"Authorization":["REDACTED"],"X-Request-Id":["REDACTED"],"User-Agent":["Mozilla/5.0 (Android) OpenCloud-android/1.1.0"],"Accept-Encoding":["identity"],"Accept-Language":["en"],"X-Forwarded-For":["REDACTED"],"X-Forwarded-Proto":["https"],"Content-Length":["432"],"Content-Type":["application/xml; charset=utf-8"],"X-Forwarded-Host":["cloud.example.com"],"Via":["1.1 Caddy"]},"tls":{"resumed":true,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"cloud.example.com","ech":false}},"headers":{"Content-Length":["228"],"Content-Security-Policy":["child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://update.opencloud.eu/ https://auth.example.com https://onlyoffice.example.com/ wss://onlyoffice.example.com/; default-src 'none'; font-src 'self'; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/ https://auth.example.com https://collabora.example.com/ https://docs.opencloud.eu; img-src 'self' data: blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://tile.openstreetmap.org/ https://collabora.example.com/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline' https://auth.example.com; style-src 'self' 'unsafe-inline'"],"Date":["Sat, 28 Feb 2026 16:02:59 GMT"],"Vary":["Origin"],"X-Content-Type-Options":["nosniff"],"X-Request-Id":["REDACTED"],"X-Robots-Tag":["none"],"Content-Type":["text/xml; charset=utf-8"],"Referrer-Policy":["strict-origin-when-cross-origin"],"X-Frame-Options":["SAMEORIGIN"],"X-Permitted-Cross-Domain-Policies":["none"],"X-Xss-Protection":["1; mode=block"]},"status":404}

for davx5 app
{"level":"debug","ts":1772295428.3460646,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"REDACTED:9200","duration":0.031794119,"request":{"remote_ip":"REDACTED","remote_port":"28699","client_ip":"REDACTED","proto":"HTTP/2.0","method":"PROPFIND","host":"cloud.example.com","uri":"/remote.php/dav/spaces/REDACTED/Test/Test%20+%20Test","headers":{"Content-Type":["application/xml; charset=utf-8"],"Content-Length":["346"],"Accept-Encoding":["br, gzip"],"Authorization":["REDACTED"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["cloud.example.com"],"Via":["2.0 Caddy"],"Depth":["1"],"User-Agent":["DAVx5/4.5.9-ose (dav4jvm; okhttp/5.3.2) Android/15"],"Accept-Language":["en-US, en;q=0.7, *;q=0.5"],"X-Forwarded-For":["REDACTED"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"cloud.example.com","ech":false}},"headers":{"Access-Control-Expose-Headers":["Tus-Resumable, Tus-Version, Tus-Extension"],"Date":["Sat, 28 Feb 2026 16:17:08 GMT"],"Dav":["1, 3, extended-mkcol"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Tus-Extension":["creation, creation-with-upload, checksum, expiration"],"Tus-Resumable":["1.0.0"],"X-Content-Type-Options":["nosniff"],"X-Frame-Options":["SAMEORIGIN"],"Tus-Version":["1.0.0"],"X-Permitted-Cross-Domain-Policies":["none"],"X-Request-Id":["REDACTED"],"Content-Type":["application/xml; charset=utf-8"],"X-Robots-Tag":["none"],"X-Xss-Protection":["1; mode=block"],"Content-Security-Policy":["child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://update.opencloud.eu/ https://auth.example.com https://onlyoffice.example.com/ wss://onlyoffice.example.com/; default-src 'none'; font-src 'self'; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/ https://auth.example.com https://collabora.example.com/ https://docs.opencloud.eu; img-src 'self' data: blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://tile.openstreetmap.org/ https://collabora.example.com/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline' https://auth.example.com; style-src 'self' 'unsafe-inline'"],"Vary":["Origin, Prefer"]},"status":207}

Problem is here, where opencloud app asks for this uri /dav/spaces/REDACTED/Test/Test%20%20%20Test/
And davx5 asks for this uri remote.php/dav/spaces/REDACTED/Test/Test%20+%20Test

[cannorin]

I took an nginx access log of opening test/(.jpg, test/[.jpg, and test/([.jpg with OpenCloud Android app and a third-party WebDAV client, only the latter of which can show test/([.jpg without any problem.

# Open the `test` directory in OpenCloud Android app
# The thumbnails are displaying for all the images

"PROPFIND /dav/spaces/REDACTED/test/ HTTP/1.1" 207 6212 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"GET /dav/spaces/REDACTED/test/(.jpg?x=336&y=336&c=&preview=1 HTTP/1.1" 200 155115 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"GET /dav/spaces/REDACTED/test/(%5B.jpg?x=336&y=336&c=&preview=1 HTTP/1.1" 200 155156 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"GET /dav/spaces/REDACTED/test/%5B.jpg?x=336&y=336&c=&preview=1 HTTP/1.1" 200 155171 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"

# Try to preview each image in OpenCloud Android app
# test/(.png
"PROPFIND /dav/spaces/REDACTED/test/(.jpg HTTP/1.1" 207 1127 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"PROPFIND /remote.php/dav/files/user HTTP/1.1" 207 9586 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"GET /dav/spaces/REDACTED/test/(.jpg HTTP/1.1" 200 41168 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
# test/([.png
"PROPFIND /dav/spaces/REDACTED/test/(%5B.jpg HTTP/1.1" 207 1130 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
# test/[.png
"PROPFIND /dav/spaces/REDACTED/test/%5B.jpg HTTP/1.1" 207 1127 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"PROPFIND /remote.php/dav/files/user HTTP/1.1" 207 9586 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"
"GET /dav/spaces/REDACTED/test/%5B.jpg HTTP/1.1" 200 41168 "-" "Mozilla/5.0 (Android) OpenCloud-android/1.1.0" "-"

# Open the `test` directory in the WebDAV client
"PROPFIND /remote.php/dav/spaces/REDACTED/test/ HTTP/2.0" 207 8403 "-" "okhttp/4.10.0" "-"

# Try to preview each image in the WebDAV client
# test/(.png
"GET /remote.php/dav/spaces/REDACTED/test/(.jpg HTTP/2.0" 200 41168 "-" "okhttp/4.10.0" "-"
# test/([.png
"GET /remote.php/dav/spaces/REDACTED/test/(%5B.jpg HTTP/2.0" 200 41168 "-" "okhttp/4.10.0" "-"
# test/[.png
"GET /remote.php/dav/spaces/REDACTED/test/%5B.jpg HTTP/2.0" 200 41168 "-" "okhttp/4.10.0" "-"

Here are my findings:

1. Both apps seems use the same encoded path test/(%5B.jpg. This suggests that @markussbk's problem is somewhat different than what I am experiencing.

2. In OpenCloud Android app, the GET requests for fetching thumbnails are working correctly, while the GET request for fetching the actual image to preview ([.jpg is not firing in the first place. This suggests that the problem is indeed in the app.

[cannorin]

I just realized there is an in-app logging functionality, and I got this error:

D: 2026-03-03 20:57:04:715(OpenCloudClient.java:129)Executing in request with id [REDACTED]
D: 2026-03-03 20:57:04:739(LogInterceptor.kt:67)REQUEST [REDACTED] {"request":{"body":"<?xml version='1.0' encoding='UTF-8' ?><propfind xmlns=\"DAV:\" xmlns:CAL=\"urn:ietf:params:xml:ns:caldav\" xmlns:CARD=\"urn:ietf:params:xml:ns:carddav\" xmlns:SABRE=\"http://sabredav.org/ns\" xmlns:OC=\"http://owncloud.org/ns\"><prop><displayname /><getcontenttype /><resourcetype /><getcontentlength /><getlastmodified /><creationdate /><getetag /><OC:permissions /><OC:id /><OC:size /><OC:privatelink /><OC:share-types /></prop></propfind>","headers":{"Depth":"0","Authorization":"Bearer [redacted]","X-Request-ID":"[REDACTED]","User-Agent":"Mozilla/5.0 (Android) OpenCloud-android/1.1.0","Accept-Encoding":"identity","Accept-Language":"en","Content-Type":"application/xml; charset=utf-8","Content-Length":"432","Host":"example.com","Connection":"Keep-Alive"},"info":{"id":"[REDACTED]","method":"PROPFIND","url":"https://example.com/dav/spaces/[REDACTED]/test/(%5B.jpg"}}}
D: 2026-03-03 20:57:04:741(LogInterceptor.kt:133)RESPONSE [REDACTED] {"response":{"body":{"data":"<d:multistatus xmlns:s=\"http://sabredav.org/ns\" xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\"><d:response><d:href>/dav/spaces/[REDACTED]/test/%28%5B.jpg</d:href><d:propstat><d:prop><d:getcontenttype>image/jpeg</d:getcontenttype><d:resourcetype></d:resourcetype><d:getcontentlength>41168</d:getcontentlength><d:getlastmodified>Wed, 11 May 2022 18:27:52 GMT</d:getlastmodified><d:getetag>\"[REDACTED]\"</d:getetag><oc:permissions>RDNVWZP</oc:permissions><oc:id>[REDACTED]![REDACTED]</oc:id><oc:size>41168</oc:size><oc:privatelink>https://example.com/f/[REDACTED]%21[REDACTED]</oc:privatelink></d:prop><d:status>HTTP/1.1 200 OK</d:status></d:propstat><d:propstat><d:prop><d:displayname></d:displayname><d:creationdate></d:creationdate><oc:share-types></oc:share-types></d:prop><d:status>HTTP/1.1 404 Not Found</d:status></d:propstat></d:response></d:multistatus>","length":1130},"headers":{"Server":"nginx","Date":"Tue, 03 Mar 2026 11:57:05 GMT","Content-Type":"application/xml; charset=utf-8","Content-Length":"1130","Connection":"keep-alive","Access-Control-Expose-Headers":"Tus-Resumable, Tus-Version, Tus-Extension","Content-Security-Policy":"child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://update.opencloud.eu/; default-src 'none'; font-src 'self'; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/ https://docs.opencloud.eu; img-src 'self' data: blob: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/ https://tile.openstreetmap.org/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'","Dav":"1, 3, extended-mkcol","Referrer-Policy":"strict-origin-when-cross-origin","Tus-Extension":"creation, creation-with-upload, checksum, expiration","Tus-Resumable":"1.0.0","Tus-Version":"1.0.0","Vary":"Origin, Prefer","X-Content-Type-Options":"nosniff","X-Frame-Options":"SAMEORIGIN","X-Permitted-Cross-Domain-Policies":"none","X-Request-Id":"[REDACTED]","X-Robots-Tag":"none","X-Xss-Protection":"1; mode=block"},"info":{"id":"[REDACTED]","method":"PROPFIND","reply":{"cached":false,"duration":22,"durationString":"duration(0h, 0min, 0s, 22ms)","status":207,"version":"http/1.1"},"url":"https://example.com/dav/spaces/[REDACTED]/test/(%5B.jpg"}}}
I: 2026-03-03 20:57:04:742(ReadRemoteFileOperation.kt:75)Read remote file /test/([.jpg with status 207
E: 2026-03-03 20:57:04:743(RemoteOperationResult.java:120)---------------------------------
Create RemoteOperationResult from exception.
 Message: NullPointerException: 
 Stacktrace: java.lang.NullPointerException
	at eu.opencloud.android.lib.resources.files.ReadRemoteFileOperation.run(ReadRemoteFileOperation.kt:79)
	at eu.opencloud.android.lib.common.operations.RemoteOperation.runOperation(RemoteOperation.java:264)
	at eu.opencloud.android.lib.common.operations.RemoteOperation.execute(RemoteOperation.java:229)
	at eu.opencloud.android.lib.resources.files.services.implementation.OCFileService.readFile(OCFileService.kt:111)
	at eu.opencloud.android.data.files.datasources.implementation.OCRemoteFileDataSource$readFile$1.invoke(OCRemoteFileDataSource.kt:159)
	at eu.opencloud.android.data.files.datasources.implementation.OCRemoteFileDataSource$readFile$1.invoke(OCRemoteFileDataSource.kt:158)
	at eu.opencloud.android.data.RemoteOperationHandlerKt.executeRemoteOperation(RemoteOperationHandler.kt:80)
	at eu.opencloud.android.data.files.datasources.implementation.OCRemoteFileDataSource.readFile(OCRemoteFileDataSource.kt:158)
	at eu.opencloud.android.data.files.repository.OCFileRepository.readFile(OCFileRepository.kt:334)
	at eu.opencloud.android.usecases.synchronization.SynchronizeFileUseCase.run(SynchronizeFileUseCase.kt:50)
	at eu.opencloud.android.usecases.synchronization.SynchronizeFileUseCase.run(SynchronizeFileUseCase.kt:36)
	at eu.opencloud.android.domain.BaseUseCaseWithResult.invoke(BaseUseCaseWithResult.kt:30)
	at eu.opencloud.android.usecases.synchronization.SynchronizeFolderUseCase.run(SynchronizeFolderUseCase.kt:61)
	at eu.opencloud.android.usecases.synchronization.SynchronizeFolderUseCase.run(SynchronizeFolderUseCase.kt:31)
	at eu.opencloud.android.domain.BaseUseCaseWithResult.invoke(BaseUseCaseWithResult.kt:30)
	at eu.opencloud.android.extensions.ViewModelExt$runUseCaseWithResult$1.invokeSuspend(ViewModelExt.kt:67)
	at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
	at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
	at kotlinx.coroutines.internal.LimitedDispatcher.run(LimitedDispatcher.kt:42)
	at kotlinx.coroutines.scheduling.TaskImpl.run(Tasks.kt:95)
	at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:570)
	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:677)
	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:664)

---------------------------------

You can see that the server responds to PROPFIND /dav/spaces/[REDACTED]/test/(%5B.jpg with <d:href>/dav/spaces/[REDACTED]/test/%28%5B.jpg</d:href>, where both [ and ( are escaped. The same is true for PROPFIND /dav/spaces/[REDACTED]/test/(.jpg (returns <d:href>/dav/spaces/[REDACTED]/test/%28.jpg</d:href>) and PROPFIND /dav/spaces/[REDACTED]/test/%5B.jpg (returns <d:href>/dav/spaces/[REDACTED]/test/%5B.jpg</d:href>).

Since the exception is happening at here:

android/opencloudComLibrary/src/main/java/eu/opencloud/android/lib/resources/files/ReadRemoteFileOperation.kt

Lines 78 to 83 in a0c27e8

	val remoteFile = RemoteFile.getRemoteFileFromDav(
	davResource = propFind.root!!,
	userId = AccountUtils.getUserId(mAccount, mContext),
	userName = mAccount.name,
	spaceWebDavUrl = spaceWebDavUrl,
	)

I suspect that the problem is in how dav4jvm handles the PROPFIND requests:

android/opencloudComLibrary/src/main/java/eu/opencloud/android/lib/common/http/methods/webdav/PropfindMethod.kt

Lines 57 to 70 in a0c27e8

	davResource.propfind(
	depth = depth,
	reqProp = propertiesToRequest,
	listOfHeaders = super.getRequestHeadersAsHashMap(),
	callback = { response: Response, hrefRelation: HrefRelation ->
	when (hrefRelation) {
	HrefRelation.MEMBER -> members.add(response)
	HrefRelation.SELF -> this.root = response
	HrefRelation.OTHER -> {
	}
	}
	}, rawCallback = { callBackResponse: okhttp3.Response ->
	response = callBackResponse
	})

where:

• /dav/spaces/[REDACTED]/test/(.jpg and /dav/spaces/[REDACTED]/test/%28.jpg are (somehow) considered as the same path, returning HrefRelation.SELF,
• /dav/spaces/[REDACTED]/test/%5B.jpg and /dav/spaces/[REDACTED]/test/%5B.jpg are the same path, also returning HrefRelation.SELF,
• /dav/spaces/[REDACTED]/test/(%5B.jpg and /dav/spaces/[REDACTED]/test/%28%5B.jpg are different, returning HrefRelation.OTHER.

[cannorin]

@guruz Could you label this as a bug? Let me know if you need more information :)