Use ap_unescape_url_keep2f() in ap_expr unescape func. ap_unescape_url() forbidding encoded slashes is not useful here. Log failures. Improve docs.
httpd/httpd/trunk/docs/manual/expr.xml
httpd/httpd/trunk/server/util_expr_eval.c