we encode too much as we encode the whole path. if there is an encoded %2F in a name, the % will be encoded again so we should be safe.