fixed missing escape for ampersand