I hope someone has a good answer for this stupid question.

I'm trying to connect to my sql server 2008 database and I'm using impersonation within my asp.net 3.5 application

<identity impersonate="tr ue" userName="testU serName" password="test& test" />

Naturally the compiler won't compile until I use the escape character:

<identity impersonate="tr ue"...