Escape ampersand characters to the corresponding entity in the `Versions` class

In the `Versions` class, one ampersand character in the generated URL ("ShowDifferences") has not been escaped to the corresponding HTML entity `&amp;`. This PR fixes the issue thus making the generated HTML markup valid again.