Chrome Version: 63.0.3239.132
OS: Linux 4.4.0-103-generic

What steps will reproduce the problem?
(1) Navigate to a page, open dev tools
(2) Type: window.location.href = "foo%22?foo%22#foo%22";
(3) Browser will load new page. Look at the URL in the URL bar.

What is the expected result?

The URL shown is http://example.com/foo%22?foo%22#foo%22

What happens instead?

The URL shown is http://example.com/foo"?foo"#foo%22

When inspecting window.location, the values are correctly escaped. When copying the URL, the values are also correctly escaped.