> Like you say, though, it's definitely a technical issue to be taken up > elsewhere. Where you will be told that this is 'working as intended'. & is usually sent in URLs by broken clients, so we block them as early as possible. Domas