Per w3c, URL encoding for "&" is "%26", and in this case it's coding it like you would to put an & symbol into HTML code, which is incorrect for this use because it isn't usable by the browser in this format.
Reference: w3schools.com/tags/ref_urlencode.asp