See this Comm Center thread by Peter Velez. Turned out his site name "SSO, Australia" with a commma was not getting URI-decoded. I needed to use unescape() not urlDecode().