Fairly simple thing, perhaps I'm missing something:
When we have a post that uses the External URL field, and that URL has an ampersand in it (example.com/index.php?foo=1&bar=2), the RSS feed for the site ends up with <link> and <comments> tags which contain the unescaped ampersand character instead of & or & entities. As a result, RSS validation breaks and a bunch of clients choke on the malformed XML.
Am I seeing a bug, or am I missing something totally obvious here?