Merge branch 'advisory-fix-1' of github.com:onionshare/onionshare-ghsa-24m9-8mf9-pqrj into release-2.6.2

desktop/onionshare/tab/mode/history.py

@@ -23,6 +23,7 @@ import subprocess
 import os
 from datetime import datetime
 from PySide6 import QtCore, QtWidgets, QtGui
+from urllib.parse import unquote
 
 from ... import strings
 from ...widgets import Alert
@@ -464,7 +465,9 @@ class IndividualFileHistoryItem(HistoryItem):
         self.common = common
 
         self.id = id
-        self.path = path
+        # Decode and sanitize the path to remove newlines
+        decoded_path = unquote(path)
+        self.path = decoded_path.replace("\r", "").replace("\n", "")
         self.total_bytes = 0
         self.downloaded_bytes = 0
         self.started = time.time()