Split options to sanitaize and escape.

And, escape "&", ";" also for a query parameter.