urlmatch: use hex2chr() in append_normalized_escapes()