Items with `&` in them give warnings

[captn3m0]

Since we are using pango markup, &, <> need to be encoded correctly to their HTML entities.