do not accept %00 in url since it is not processed correctly anyway