How BadURLChars, BadQueryChars and BadFormChars settings work.