Html escapement: do & -> &amp; before others.
Avoid escaping '&' introduced by other escape sequences.