escape `&` in source code before highlight
update esprima version