Escape &'s in href attributes (fixes #23)
Merge pull request #24 from peterkuma/master

Escape &'s in href attributes (fixes #23)