forbidden URL characters

# % & * { } \ : < > ? / + are not too healthy for URLs.