The problem is that the url given above is not valid - ? and & need to be escaped in
the parameter value. Browsers do this automatically behind the scenes, and then
Rails transforms the parameters back. It seems unclear why you’re having this
problem - url_for automatically handles the encoding, and so do forms.