if your parser doesn't complain on the xml you can use the translate() function. but a correct working parser should give you an "undefined entity" error. in this case you have to change the & either by hand or by a script. maybe you can do something with CDATA, but I haven't used it like that yet.