Ampersands in URLs in HTML

At 10:18 PM 5/26/99 +0100, Mats Dufberg wrote:
> Ampersand is legal in a URL, but it is a control character in HTML. If it
> is legal depends on its position:
>
> <a href="http://dom.se/test?a=1b=2";>http://dom.se/test?a=1&b=2
>                               ^                           ^
>                               |                           |
>            Legal, part of URL |                           |
>                                                           |
>                Here the ampersamd should be encoded as "&amp;"
Sorry, but this is not so.  Yes '&' is legal in the URL but it still needs
to be escaped when the URL appears in an HTML attribute as you have shown.

Please review

 Character references
 http://www.w3.org/TR/PR-html40/charset.html#h-5.3

Al