url escape code for the amp and the semi