These `&` should be HTML escaped.