2.4.6 regression: file_browser displays path unencoded

[SlavikCA]

Use case:
I'm using Caddy to publish school lesson's videos & images via file_server. Here is config:

:80
bind 0.0.0.0

root * /var/www/html
file_server browse {
  hide "#snapshot" "@eaDir" *.db
}

In version 2.4.5 the name of current folder was displayed correctly on top of the page (the breadcrumb).

Bug:
However, in version 2.4.6 it is displayed unencoded. I suspect it caused by security patch and is probably needed. But can the path be correctly encoded and displayed in the UI?

The URL's are changed, too.

The page <title> is unencoded, too

Here are 2 screenshots of 2.4.5 vs 2.4.6:

Space in the name of the folder:

Russian characters:

[francislavoie]

I think this was caused by 33c70f4 /cc @mohammed90

[mohammed90]

Thanks for the report! Looking at it 👀