Replacing the &
with &
is correct - but only for the HTML representation of the URL.
If you paste the HTML representation of the URL into the address bar, then it won't work because the address bar expects a text representation of the URL.
The HTML representation of the URL will work fine when entered as the value of a src
attribute.