[Bug]: wrong document root path to javascript files after update to 28.0.4.1

[bbx-github]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

After an update to 28.0.4.1 nextcloud.log has errors with wrong docroot.
path in nextcloud.log: /var/www/nextcloud/htdocsapps//core/

Steps to reproduce

use web interface

Expected behavior

expected path: /var/www/nextcloud/htdocs/apps/core/

Installation method

Community Manual installation with Archive

Nextcloud Server version

28

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.2

Web server

Apache (supported)

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
  "system": {
    "instanceid": "***REMOVED SENSITIVE VALUE***",
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
      "cloud.my.dom",
      "www.my.dom"
    ],
    "datadirectory": "***REMOVED SENSITIVE VALUE***",
    "overwrite.cli.url": "https://cloud.my.dom/",
    "dbtype": "mysql",
    "version": "28.0.4.1",
    "dbname": "***REMOVED SENSITIVE VALUE***",
    "dbhost": "***REMOVED SENSITIVE VALUE***",
    "dbtableprefix": "oc_",
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "logtimezone": "UTC",
    "installed": true,
    "default_language": "de",
    "theme": "",
    "maintenance": false,
    "loglevel": "2",
    "trashbin_retention_obligation": "D5, D10",
    "appstore.experimental.enabled": false,
    "forcessl": true,
    "singleuser": false,
    "memcache.local": "\\OC\\Memcache\\Memcached",
    "memcached_servers": [
      [
        "localhost",
        11211
      ]
    ],
    "filelocking.enabled": true,
    "memcache.locking": "\\OC\\Memcache\\Redis",
    "redis": {
      "host": "***REMOVED SENSITIVE VALUE***",
      "port": 0,
      "timeout": 0
    },
    "mail_smtpmode": "smtp",
    "mail_smtpauthtype": "LOGIN",
    "mail_smtpsecure": "tls",
    "mail_smtpauth": 1,
    "mail_domain": "***REMOVED SENSITIVE VALUE***",
    "mail_from_address": "***REMOVED SENSITIVE VALUE***",
    "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpport": "587",
    "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
    "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
    "default_locale": "de_DE",
    "default_phone_region": "DE",
    "updater.release.channel": "stable",
    "app_install_overwrite": [
      "calendar"
    ],
    "mysql.utf8mb4": true,
    "maintenance_window_start": 3
  }
}

List of activated Apps

No response

Nextcloud Signing status

No errors have been found.

Nextcloud Logs

{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"2a02:XXXXX","user":"XXXXX","app":"PHP","method":"GET","url":"/index.php/settings/admin/overview","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/js/merged-template-prepend.mjs) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"2a02:XXXXX","user":"XXXXX","app":"PHP","method":"GET","url":"/index.php/settings/admin/overview","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/js/merged-template-prepend.js) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"2a02:XXXXX","user":"XXXXX","app":"PHP","method":"GET","url":"/index.php/settings/admin/overview","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/l10n/en.mjs) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"2a02:XXXXX","user":"XXXXX","app":"PHP","method":"GET","url":"/index.php/settings/admin/overview","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/l10n/en.js) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0","version":"28.0.4.1","data":{"app":"PHP"}}

{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"84.XX.XX.XX","user":"--","app":"PHP","method":"GET","url":"/index.php/login/v2/flow?user=XXXXX","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/js/merged-template-prepend.mjs) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"84.XX.XX.XX","user":"--","app":"PHP","method":"GET","url":"/index.php/login/v2/flow?user=XXXXX","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/js/merged-template-prepend.js) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"84.XX.XX.XX","user":"--","app":"PHP","method":"GET","url":"/index.php/login/v2/flow?user=XXXXX","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/l10n/de.mjs) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","version":"28.0.4.1","data":{"app":"PHP"}}
{"reqId":"XXXXX","level":3,"time":"2024-04-11T1X:XX:XX+XX:XX","remoteAddr":"84.XX.XX.XX","user":"--","app":"PHP","method":"GET","url":"/index.php/login/v2/flow?user=XXXXX","message":"is_file(): open_basedir restriction in effect. File(/var/www/nextcloud/htdocsapps//core/l10n/de.js) is not within the allowed path(s): (/var/www/nextcloud/htdocs/:/var/www/nextcloud/tmp/:/var/www/nextcloud/data/:/dev/urandom:/proc/meminfo) at /var/www/nextcloud/htdocs/lib/private/Template/ResourceLocator.php#100","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","version":"28.0.4.1","data":{"app":"PHP"}}

Additional info

No response

[bbx-github]

I checked several other nextcloud 28.0.4.1 installations.

• postgres + nginx + php8.2-fpm
• mariadb + nginx + php8.2-fpm
• mariadb + apache2 + php8.2-fpm

All have this issue.

[SystemKeeper]

Fixed by #44413