Escape ampersand characters to the corresponding HTML entity

There were some unescaped ampersand characters when it comes to URL parameters, thus making the markup invalid.

Fix applied to

* various module classes
* Controller library

Signed-off-by: xchs <github@gmx.net>