You could set a rule on the file attachment that removes the special characters using the translate xpath function.
The rule would set the value of the field equal to translate(field, '&','') - where the ampersand is a special character and the double quote at the end is actually to single quotes.