escape '%' in request