diff --git a/source/Ox/js/HTML.js b/source/Ox/js/HTML.js
index e7e6bc8c..cd4634a9 100644
--- a/source/Ox/js/HTML.js
+++ b/source/Ox/js/HTML.js
@@ -470,6 +470,8 @@
         '<b>foo</b>'
         > Ox.sanitizeHTML('<b>foo</b></b>')
         '<b>foo</b>'
+        > Ox.sanitizeHTML('&&amp;')
+        '&amp;&amp;'
     @*/
     Ox.sanitizeHTML = function(html, tags) {
         var matches = [];