Merge pull request #86 from buglabs/sanitize-oversight

Makes sure & is sanitized first.

Author: c4milo

lib/sanitize.js

@@ -13,12 +13,12 @@
  *      '       '
  */
 var chars = {
+    '&': '&',
     '<': '&lt;',
     '>': '&gt;',
     '(': '&#40;',
     ')': '&#41;',
     '#': '&#35;',
-    '&': '&amp;',
     '"': '&quot;',
     "'": '&apos;'
 };