Escape & even if it looks like an HTML entity. Don't try to prevent double-escaping.
Merge pull request #159 from visionmedia/ejs and add test

Original commit message: Fixed infinite loop problem in parse for unescaped ejs
Merge upstream changes
Merge pull request #165 from jtsay362/master

Escape & even if it looks like an HTML entity.