However, it turns out that the built-in implementation of the FTP client in Java doesn’t filter out special CR (carriage return) and LF (line feed) characters from URLs and actually interprets them.