Comment from Petr Pisar points out that our strict regex checking of the address missed the "%" character.
Added; and tested.