URL parameters should always be encodeURIComponent'd.