Never paste such a string into a browser address bar unless you fully control the environment.