&-s not escape in search results

[mortenpi]

I think we directly pass the &-s to the generated dynamically generated HTML, which means they get interpreted as character references sometimes. We should escape them, either when constructing the HTML, or maybe even during index generation (although I am not sure this actually makes sense).

X-ref for more details for an "MWE": JuliaLang/julia#52078