From 850de413f9e5e088c8a7586a1cf94bdce2eea13b Mon Sep 17 00:00:00 2001
From: Isaac Moore <rmsy@me.com>
Date: Tue, 28 Nov 2023 17:40:51 -0600
Subject: [PATCH] Use hash fragments, which are more private

They prevent user data from leaving the browser.
---
 index.html   | 2 +-
 pairing.html | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/index.html b/index.html
index 564de49..e5bfa94 100755
--- a/index.html
+++ b/index.html
@@ -305,7 +305,7 @@ <h2>Where does this tool come from?</h2>
 
               link.addEventListener( 'click', protect );
               link.setAttribute( 'data-name', name );
-              link.href = window.location.protocol + '//' + window.location.host + pairingPath + pairingQueryString;
+              link.href = window.location.protocol + '//' + window.location.host + pairingPath + pairingHashFragment;
               link.target = '_blank';
               link.innerText = link.href;
 
diff --git a/pairing.html b/pairing.html
index 2f3b132..4b21a90 100755
--- a/pairing.html
+++ b/pairing.html
@@ -127,13 +127,13 @@
 
         <script>
 
-            var queryString = _.chain( location.search.slice( 1 ).split( /&/g ) )
+                var hashString = _.chain(location.hash.slice(1).split(/&/g))
                 .map( function ( item ) { if ( item ) return item.split( /=/ ).map( function ( str ) { return decodeURIComponent( str ); } ); } )
                 .compact().object().value();
 
-            var name = queryString.name;
+                var name = hashString.name;
 
-            var pairing = CryptoJS.AES.decrypt( queryString.pairing, queryString.key ).toString(CryptoJS.enc.Utf8);
+                var pairing = CryptoJS.AES.decrypt(hashString.pairing, hashString.key).toString(CryptoJS.enc.Utf8);
             var pairingDefinition = pairing.match( /^([^(]+)(?: (\([^)]+\)))?$/ );
 
         </script>