We are crafting a URL, not user output. Use & not &amp; here. Unbreaks export.