replace & with the HTML entity in escapeHTML

content/util.js

@@ -35,7 +35,7 @@ vimperator.util = {
         // var e = window.content.document.createElement("div");
         // e.appendChild(window.content.document.createTextNode(str));
         // return e.innerHTML;
-        return str.replace(/</, "&lt;").replace(/>/, "&gt;");
+        return str.replace("&", "&amp;").replace("<", "&lt;").replace(">", "&gt;");
     },
 
     // TODO: use :highlight color groups