server-side check for bad chars in URI