invalid URL escape "%&d"