making sure that everything is properly html encoded when generating the html. it seems like there are some &amp; instances in the inbound urls that we should have been removing before. That's happening now