replace '&' with &amp; when it is not in a character entity (approximation)