The line
var data = 'http_accept=json&offset=' + offset;
is part of js that is part of html.
This means that "&" has still to be encoded as "&" for the page to validate.
Same consideration applies to similar lines