This week's book giveaway is in the OCPJP forum. We're giving away four copies of OCA/OCP Java SE 7 Programmer I & II Study Guide and have Kathy Sierra & Bert Bates on-line! See this thread for details.
Your parameters will need to be encoded if they contain any control characters. The browser will do this for you if they are the result of a form submission. If you're passing them by building up query strings, you would need to make sure they are properly escaped.