tobek

This is a pain. But a workaround is to use \u0026 instead of &. You can specify any unicode character in a JS string using \u####, and the result is the same as entering the actual character, but WordPress passes it over unharmed =)