Correctly quote &, <, >