Fixed "&" sanitation.

With the added sanitation of ";", the & sanitation interfered with the html codes for the characters. This fixes that, such that "&" will match, but any character code, consisting of "&#" does not match.