[Backports] Escape ampersand in app names and comments