URLs mangled multiple times

[cardi]

Sometimes the URLs are mangled multiple times, e.g.,

https://urldefense[.]us/v2/url?u=https-3A__urldefense[.]com_v3_

It used to be the case that if a URL already had the form of http://urldefense[.]com/..., the middlebox wouldn't touch it (though would it change any of the user/org-based parameters?).

This behavior could be the result of migrating from (or incorporating) their multiple domains or the mixing of v3 and v2 versions.

The solution for now should be to recursively decode until the URL is clean, up to some limit (maybe 5?).