"&" bug fix

"&" interfering, again, with the html escaper