don't replace '&' from html-encoded character