Description
URL parameters containg a single quote are incorrectly escaped as e.g. "Joe\'s+Garage". RFC 2396 doesn't prescribe this escaping, the resulting URL contains an unescaped backslash character (thus making it invalid), and Wicket doesn't undo this escaping when such parameters are parsed.