That needs to be escaped too. `@` for example is part of the URL spec. 
It needs to be 
```
%5B%40%20{{ report.signature|urlencode }}%5D
```