Some characters are not authorized in URLs while they should be.

After fixing the querystring issue, I encountered a new one that I didn't expect at first. When using chars such as `-` in the URL, it would also be described as an invalid request.

I patched the regexp once again to make it a lot more generic, hoping it would fix the issue once and for all.

All tests are still green after this change.