[lazylex/html] Allow unescaped &