>  I already tried, but it doesn't work :(

It definitely should - %2F is correctly unescaped before 
being sent during the request.

Do you have an access denied error in the hts-info.txt log ?