enforce uri-encoded urls