Ignore asset requests containing %2e in them.

urldecode URI's early to avoid issues with encoded `.` characters.