stefan.tollkuehn
9ae3f0a344
Nextcloud checks the CSRF token on every controller method without NoCSRFRequired, GET included. The invitee input's bare fetch sends no request token, so the search answered 412 Precondition Failed. The endpoint is a read-only address book query without side effects, so the attribute is safe here.