Merge pull request #243 from microsoft/lwsimpkins/fix-qhelp

fix powershell qhelp files

powershell/ql/src/experimental/UseOfReservedCmdletChar.qhelp

@@ -6,7 +6,7 @@
 <p>
 You cannot use following reserved characters in a function or cmdlet name as these can cause parsing or runtime errors.
 
-Reserved Characters include: #,(){}[]&/\\$^;:\"'<>|?@`*%+=~
+Reserved Characters include: #,(){}[]&amp;/\\$^;:\"'&lt;&gt;|?@`*%+=~
 </p>
 
 </overview>

powershell/ql/src/queries/security/cwe-078/CommandInjection.qhelp

@@ -4,7 +4,7 @@
 <qhelp>
 <overview>
 <p>Code that passes user input directly to
-<code>Invoke-Expression</code>, <code>&</code>, or some other library
+<code>Invoke-Expression</code>, <code>&amp;</code>, or some other library
 routine that executes a command, allows the user to execute malicious
 code.</p>
 

powershell/ql/src/queries/security/cwe-078/DoNotuseInvokeExpression.qhelp

@@ -11,7 +11,7 @@
 
 <p>Avoid using <code>Invoke-Expression</code> in your powershell code.</p>
 
-<p>If you’re running some command and the command path has spaces in it, then you need the command invocation operator <code>&</code></p>
+<p>If you’re running some command and the command path has spaces in it, then you need the command invocation operator <code>&amp;</code></p>
 </recommendation>
 
 <references>