escape ampersand in attribute serialization