Fix lethal bug: all '%' need to be escaped