one text
& is used as a field separator in your url query. You can use %26 which is your & encoded to be used in an uri.
&
%26
You can read more about it on MDN