Passing an URL that contains an encoded # character in its path, e.g.

file:///tmp/foo/%23 for path /tmp/foo/#

leads to the parent directory,here /tmp/foo, being listed.

The cause seems to be QQuickFolderListModelPrivate::resolvePath(), more precisely that it converts the correctly extraced local path into an URL again and then takes the path of that.

The QQmlFile::urlToLocalFileOrQrc(path) call decoded the %23 correctly to #, the conversion to QUrl using the constructor overload for QString does not encode it again.