For note, things like <a href="?foo&bar"> is invalid according to the spec (is it still in html5? I think so) as &bar does not exist, ampersand is the escape character, so if it should be part of the URL then you need to escape & via & to become <a href="?foo&bar">, this is just standard HTML. 
