CLASS: PUBLIC ics imports as private, when there is a SPACE before PUBLIC

[jannes922]

Steps to reproduce

1. Import ics in nextcloud web ui in a shared calendar:

BEGIN:VCALENDAR
VERSION:2.0
PRODID:https://github.com/derhansen/sf_event_mgt
METHOD:PUBLISH
BEGIN:VEVENT
UID:xx@mail.tld
CLASS: PUBLIC
SUMMARY:xxx
DESCRIPTION:xx
LOCATION:xx
DTSTAMP:20260228T182157Z
DTSTART:20260327T080000Z
DTEND:20260327T140000Z
END:VEVENT

2. Events are visible for the user who imported the ics. No error observed.
3. Check with different account, who also has access to the shared calendar.

Expected behavior

All users can see the event.
(If the import detects a non compliant ics, warn the user and do not fail silently)

Actual behavior

Users besides the owner of the shared calendar can not see the events.

Calendar app version

6.2.1

CalDAV-clients used

Thunderbird. (this produces the same result as the nextcloud web import)

Browser

ZEN

Client operating system

Linux

Server operating system

nixos, docker

Web server

Apache

Database engine version

PostgreSQL

PHP engine version

PHP 8.4

Nextcloud version

32.0.6

Updated from an older installed version or fresh install

None

List of activated apps

Nextcloud configuration

Web server error log

Log file

Browser log

Additional info

No response

[tcitworld]

It's odd that Sabre/vobject doesn't handle trimming parameter values properly, but it's just a trim() call away in
https://github.com/nextcloud/server/blob/9e65c597fe6e1aaac1c62ad262895ecc52cfeb9d/apps/dav/lib/CalDAV/CalDavBackend.php#L3156