Percent-encode or decode URLs and inspect every query-string parameter.
encodeURIComponent also encodes characters like / ? & =, which is what you need for a single query value.
Yes, valid URLs are broken down into protocol, host, path and parameters.