fix: url canonicalization applies to <= ASCII 32, >= 127, # or %