need to double encode inside 'href="javascript:...