Removed the escape behavior, it will breaks digest based authentication. Just trigger a bad request exception in this case.