You are using some illegal characters (like ' , <> , " ) or terms (like <form>, <script>, <object>, <img> ...) in the typed URL...