decodeURI can throw... `decodeURI('%f')`