page.cgi?page=page.cgi%00      (%00 == '\0' escaped)