Need to escape ampersands before escaping other chars.