From: Jean-Christophe Counio <jean-christophe.counio_at_yahoo-inc.com>
Date: Wed, 14 Jan 2009 14:46:39 +0530

Thanks Paul for the investigation. Yes it seems it is a constraint
containers put due to security
flaw (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0450), not
really a bug then,
but it will force me to double-encode anyway.

JC