unescaped square brackets (not colons), and relative URIs (#14)