Open
Description
It seems to me that we aren't properly encoding the /{flagKey} path segment in OFREP requests here.
This means that flags with certain characters in them / for example, will cause errors, and potentially present security issues.
We should encode this segment.
cc @juanparadox