FIX: "&" should be escaped to "&amp;"