sanitize
sanitize copied to clipboard
Fix standalone '&' after HTMLEscapeString call.