diff --git a/controllers/BaseController.php b/controllers/BaseController.php
index bec18314..f51f6109 100644
--- a/controllers/BaseController.php
+++ b/controllers/BaseController.php
@@ -219,6 +219,9 @@ class BaseController
 			{
 				$value = self::$htmlPurifierInstance->purify($value);
 			}
+
+			// Allow some special chars
+			$value = str_replace('&', '&', $value);
 		}
 
 		return $requestBody;