update handling of %-escapes in urls