LPS-49315 '&' character in URLs are not escaped