Novell BorderManager 3.0 EE - Encoded URL rule bypass

I suspect that this has already been defined, but I cannot find any reference to it. Setting secure areas on an intranet secured by URL rules within bordermanager can be bypassed by changing some of the characters in the URL with -encoded triplets. To access http://home.myintranet.com/secure use...