This says no but there are some places where colons are used in the path
https://en.wikipedia.org/wiki/Template:Welcome
https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken
This library encodes the colon in path.
I think it should be allowed in path.