If you have percent-escaped characters in your enclosure's URL, Sparkle will double-escape them, so you'll get %2520 instead of %20.
[master cac9450] Bug #681912: Sparkle naively double-escapes enclosure URLs
Bug watches keep track of this bug in other bug trackers.
[master cac9450] Bug #681912: Sparkle naively double-escapes enclosure URLs