• deescape data from URL
• In query, what do ? mean? Are they allowed?