Minor fix to conform with XHTML.

Without re-encoding &s to &amp; the innerHTML set blows up on XHTML pages.