location.href and top.document.referer are both already URL encoded.
To prevent double encoding we need to decode them.