Fix: Don't escape & character when sanitizing false