In XML, the ampersand () character must be escaped as (named), (decimal), or (hexadecimal) except when it appears within a CDATA section or an SGML comment.