Writing my own server that is meant to be used by Nightbot's urlfetch I've found out that Nightbot does not encode $(query) parameter in urlfetch. This can lead to unwanted results or even may be dangerous as $(query) can contain any string. Any parameter expanded inside $(urlfetch) must be URIcomponent-encoded (so e.g. ampersand symbols & turn into %26)