A CSS that include a background image causes 403

In my custom bounding box template, I have a CSS class like the below and it fails with 403:

```
.someclass {
background: url({{ task.input.taskObject | grant_read_access }}) 0 0;
}
```

The same image URL when referenced from an image tag, it is loading the image without an issue.
When looking at the generated image URL. The one from the image tag looks like this:

```
https://s3.us-west-2.amazonaws.com/dsml-us-ml-aws2-historic/hongyan/images/p0000155ejmd_001CF9FE49DF3D51AECFB3F03C71852D.jpg?X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJIMEYCIQDFxOfd2AaaWP5WMogka%2FhRaoVSSDn7irGuE3ZQJaRFXgIhAN3CXs4Ucno48knZsZ3rcq2uho61KbWhjNIgHVpUisd0Kt8CCN7%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQARoMOTk1MzgzOTIzMjM4Igyl37R5C82gpqaQE20qswLYbrW0O6KlzN3pG0x6uNRDefy68wtq30FlCweHh%2BcbKp8WLiyAxRMehBSANSAOzVsJ%2B5zXc3i2UfKy4FmHvh4HdLS6YwjppmqCdrxDzekVrjdRqtfLUH9MhcYYcp7Om5ugwQCFH4iqepFtbF8TEwc2ABwwonlCgZVeIP5gWh%2FpEYwfqIwdBZKjKQMZBbYUX2lwECuZoly7vO%2Fx5iAFolK3zCf%2F1X8eyfzYhInB6tGDNhQ%2F4O0TxPhZdigI4RWPIbbwaGQcfUdD%2F1lYRwJeGId9602s5prmyYiw0euDnVXdzInz4kQZP8JtxJXhv6kKGGBTDtrd%2BpewTgb3yJSbDgtrHLps6DtcrkzLGhvZ8s1JUBOc5M0g4DYC3To9hazU5yN0XUqDSuYKoMu83jYXao5KI0OBMMqKhpAGOo4BSOcgS3UmFnpDvlkleodDS0%2BFyLTVKTFRFV3V0kjaRKtPPXbaYuuUIospIrQO7wUPkqm3qoNIOuOuQIK6Pe7G9ztkuzWO7u0Uo6Ecqmf8aQhmPhkC%2Fx%2BGoLQ04V8ZJXZxkgZawLpyWPzClyCnMspIP5lD5zIF6ARtzCTDMHw%2FAL7KqSWpfYPtSAYGEgoj9Q%3D%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20220207T204706Z&X-Amz-SignedHeaders=host&X-Amz-Expires=956&X-Amz-Credential=ASIA6PQMBKITCFKKXANR%2F20220207%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Signature=e6c348623e442032a5d2656d7b22a1bed90b40cc7bfa35b9b1a8615fda1e2c58
```

The one from the CSS looks like this:

```
https://s3.us-west-2.amazonaws.com/dsml-us-ml-aws2-historic/hongyan/images/p0000155ejmd_001CF9FE49DF3D51AECFB3F03C71852D.jpg?X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJIMEYCIQDFxOfd2AaaWP5WMogka%2FhRaoVSSDn7irGuE3ZQJaRFXgIhAN3CXs4Ucno48knZsZ3rcq2uho61KbWhjNIgHVpUisd0Kt8CCN7%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQARoMOTk1MzgzOTIzMjM4Igyl37R5C82gpqaQE20qswLYbrW0O6KlzN3pG0x6uNRDefy68wtq30FlCweHh%2BcbKp8WLiyAxRMehBSANSAOzVsJ%2B5zXc3i2UfKy4FmHvh4HdLS6YwjppmqCdrxDzekVrjdRqtfLUH9MhcYYcp7Om5ugwQCFH4iqepFtbF8TEwc2ABwwonlCgZVeIP5gWh%2FpEYwfqIwdBZKjKQMZBbYUX2lwECuZoly7vO%2Fx5iAFolK3zCf%2F1X8eyfzYhInB6tGDNhQ%2F4O0TxPhZdigI4RWPIbbwaGQcfUdD%2F1lYRwJeGId9602s5prmyYiw0euDnVXdzInz4kQZP8JtxJXhv6kKGGBTDtrd%2BpewTgb3yJSbDgtrHLps6DtcrkzLGhvZ8s1JUBOc5M0g4DYC3To9hazU5yN0XUqDSuYKoMu83jYXao5KI0OBMMqKhpAGOo4BSOcgS3UmFnpDvlkleodDS0%2BFyLTVKTFRFV3V0kjaRKtPPXbaYuuUIospIrQO7wUPkqm3qoNIOuOuQIK6Pe7G9ztkuzWO7u0Uo6Ecqmf8aQhmPhkC%2Fx%2BGoLQ04V8ZJXZxkgZawLpyWPzClyCnMspIP5lD5zIF6ARtzCTDMHw%2FAL7KqSWpfYPtSAYGEgoj9Q%3D%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20220207T204706Z&X-Amz-SignedHeaders=host&X-Amz-Expires=956&X-Amz-Credential=ASIA6PQMBKITCFKKXANR%2F20220207%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Signature=e6c348623e442032a5d2656d7b22a1bed90b40cc7bfa35b9b1a8615fda1e2c58
```

As it is shown that the bad one has the "\&" NOT decoded.