invalid URL escape "%&\xcf"