ampersand in module name gets not escaped

Working on it.

FYI: I tested module Entity Search & Replace → and have the same problem in update report.

So i think this could be a problem in the update-module of core.

Please review the MR

Added a comment.

I am making the changes. Thanks @jurgenhaas and @jan kellermann for correcting me.

Works for me. Setting RTBC.

I merged this issue.

Thank you all for reporting, working and feedback!

And a special "thank you" to @joachim-namyslo for his job for the german version of Drupal!