replace &|'|>|< in href

RT