don't use quote_plus for urlencode filtering