Sometime Today, S cobbled together some glyphs to say:
My documents validate fine using & in the source. On the other hand, you are correct. The W3 validators chould maybe throw up a deprecation warning.
& is the valid way of passing it in.
There are other problems with semi-colons though. You can't use them in a redirect link because ; is a parameter separater in HTTP headers