not well-formed token caused by charactor '&' in text value field, how to do with this kind of using?

demo:
--------------------------------------------------------------------------------------
<xml>
	<file location="/usr/data/testuill&data"/>
</xml>
----------------------------------------------------------------------------------

then use expat parse it, will send error: not well-formed( invalid token )!

and Intelnet Explorer also raise an error!