In response to real-life validation: here's the link again. look at the source code, the ampersand entity is escaped correctly, et ca marche parfaitement. It validates too...
link to google