edit.html: we were only replacing a single instance of &, not all of them.

This meant if you were editing a row with url=...?a=b&c=d&e=f, the &e=f
would not be escaped properly.
1 file changed