Did you remember to encode any & characters as &?
                  Matti Virkkunen
                   2010-09-16 22:05:43
                
              XML attribute values must be XML-escaped. All instances of & in a URL for example must be written as &.
The same is true for HTML, by the way, only that browsers (i.e. HTML parsers) are more forgiving than XML parsers.