URL escape requirements