fixes bug ('&' must be escaped in xml: '&')

data-discovery/src/main/java/vlkb/output/XmlSerializer.java

@@ -373,10 +373,10 @@ final class XmlSerializer
          xml.append("<URL type=\"file\">" + access.accessFileUrl + "</URL>");
 
       if(access.accessCutoutUrl != null)
-         xml.append("<URL type=\"cutout\">" + access.accessCutoutUrl + "</URL>");
+         xml.append("<URL type=\"cutout\">" + access.accessCutoutUrl.replaceAll("&","&amp;") + "</URL>");
 
       if(access.accessMosaicUrl != null)
-         xml.append("<URL type=\"mosaic\">" + access.accessMosaicUrl + "</URL>");
+         xml.append("<URL type=\"mosaic\">" + access.accessMosaicUrl.replaceAll("&","&amp;") + "</URL>");
 
       xml.append("</Access>");
 

data-discovery/src/main/java/vlkb/webapi/FormatResponseFilter.java

@@ -389,11 +389,11 @@ public class FormatResponseFilter implements Filter
 
       if(coord.band != null)
       {
-         sb.append("&" + coord.band.toString());
-         //sb.append("&BANDSYS=" + coord.band.system.toString() );
+         sb.append("&" + coord.band.toString());
+         //sb.append("&BANDSYS=" + coord.band.system.toString() );
       }
 
-      sb.append("&ID="); // FIXME id-value will be added in FormatResponseFilter
+      sb.append("&ID="); // FIXME id-value will be added in FormatResponseFilter
 
       return sb.toString();
    }