https://www.example.com/protected/
%0d%0a=%0d%0a&x=%00y