URL decoding, nullpointer check