Thanks for the info.

The only thing that I have seen here and on the web is that it comes from a bad rewrite rule feed to the cart.
I guess adding some sanitizing to the string would fix it but the issue is not that high on list right now.

Skip