Fixed #770

& was in the escape list, but not being replaced :-\

Worried as to how long that was a problem!