Decode all url encoded components properly.
control characters have nothing to do inside a URL.