fix: do not filter & to &amp; as &amp; would become &amp;amp;