Sounds like whatever generates the URLs needs to do the URL-safe conversion of unsafe chars to %xx.

--pj