TemplateProcessor corrupt file if you setValue with '&' inside v0.15

[GITFenix]

This is:

• a bug report
• a feature request
• not a usage question (ask them on https://stackoverflow.com/questions/tagged/phpword)

Expected Behavior

Creating not corrupted file

Current Behavior

When I try setValue in template when there is ''&' I get corruped file. If I replace it with something else it works just fine.

Failure Information

How to Reproduce

$templateProcessor = new \PhpOffice\PhpWord\TemplateProcessor($this->fullTemplatePath);
$templateProcessor->setValue('jobPosition', '&');

To reproduce you have to setValue and provide '&' in the content

Context

• PHP version: 7.2
• PHPWord version: 0.15

[caugner]

The same happens when inserting text that includes "&".

[caugner]

Workaround:

$templateProcessor = new \PhpOffice\PhpWord\TemplateProcessor($this->fullTemplatePath);
$templateProcessor->setValue('jobPosition', htmlentities('&', ENT_XML1));

[jaydadhania08]

Using htmlspecialchars() solves this problem for &, <, and >.
Use ENT_QUOTES flag to also include ' and ".
As of PHP 7.3.5, using ENT_QUOTES | ENT_XML1 works same as ENT_QUOTES.