Now that the callback url has to be explicit my callback url with query string params is being rejected with 403.
callback_url=‘twittercallbackurl?’ + ‘var1=a&var2=a+b’ etc.
It’s ok for all query strings except ones that include a + or a %. Other encodings don’t pass e.g. %20 %2f etc.
