@hueniverse, so here I'm a bit confused. 
Is it possible to request a not encoded url? yes (at least with the basic http module as server & curl it is possible)
is it allowed? isn't it a bad request? for example, is `GET /dir/%/` allowed as a good request? shouldn't it be `GET /dir/%25/` ?
It's also harder to test this scenario, since the injector doesn't support it (at least from what I see, I will dig a bit deeper).