s/&(?![A-Za-z0-9]+;)/REPLACED/g;

##</code><code>##

s/&(?!(?:[A-Za-z0-9]+|#\d+|#x[0-9A-Fa-f]+);)/REPLACED/g;