Use &amp; instead of & in frame src

Using & in html can lead to issues and it fails HTML validation. This patch fixing the src to use &amp; instead