From 8d3f4495b52d4b0aeb6b4d4e35d62bc2bec6e096 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 17 Jun 2026 04:43:53 +0000
Subject: [PATCH 1/3] Initial plan


From d80a42f2c870969953c7b3930a04ac7c5677b113 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 17 Jun 2026 04:47:49 +0000
Subject: [PATCH 2/3] Initial plan

---
 package-lock.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 06a8d22..f97dd30 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "easy-sharing",
-  "version": "2.0.0",
+  "version": "1.3.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "easy-sharing",
-      "version": "2.0.0",
+      "version": "1.3.0",
       "license": "MIT",
       "dependencies": {
         "clipboardy": "^2.3.0",

From 1157280210a1c1aae101f3ee33abecd486a2b7ea Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 17 Jun 2026 04:48:38 +0000
Subject: [PATCH 3/3] fix: preserve HTML entities when encoding # in directory
 listing URLs

The regex that encodes '#' as '%23' in href attributes was also matching
'#' inside HTML entities like '&#47;' (slash), turning them into '&%2347;'
and breaking all directory listing links. Use negative lookbehind (?<!&)
to skip '#' that is part of HTML numeric character references.

Closes #56
---
 bin/app.js   | 2 +-
 test/test.js | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/bin/app.js b/bin/app.js
index 0562628..61511e5 100644
--- a/bin/app.js
+++ b/bin/app.js
@@ -71,7 +71,7 @@ const start = ({ port, sharePath, receive, clipboard, updateClipboardData, onSta
         res.end = function (body, encoding) {
             if (typeof body === 'string' && res.getHeader('content-type') && String(res.getHeader('content-type')).includes('text/html')) {
                 body = body.replace(/href="([^"]*)"/g, (match, href) => {
-                    const encoded = href.replace(/#/g, '%23');
+                    const encoded = href.replace(/(?<!&)#/g, '%23');
                     return 'href="' + encoded + '"';
                 });
             }
diff --git a/test/test.js b/test/test.js
index 6304b9b..ae58bb6 100644
--- a/test/test.js
+++ b/test/test.js
@@ -177,7 +177,8 @@ async function integrationTests() {
                         const res = await request('http://127.0.0.1:' + (port + 2) + '/share/');
                         assert.strictEqual(res.status, 200);
                         assert.ok(res.data.includes('%23'), 'Directory listing should encode # as %23');
-                        assert.ok(!/href="[^"]*#[^"]*"/.test(res.data), 'Directory listing should not have raw # in href');
+                        assert.ok(!/href="[^"]*(?<!&)#[^"]*"/.test(res.data), 'Directory listing should not have raw # in href');
+                        assert.ok(!res.data.includes('&%2347;'), 'Directory listing should not break &#47; HTML entities');
                         resolve();
                     } catch (err) {
                         reject(err);