Interesting; I knew entity encoding in attributes (such as href) was permitted, but I didn't know it was required.

One minor additional suggestion: make that <a href...</a>. Uppercase tags were deprecated in HTML 4.0 and are invalid in XHTML (because XML is case-sensitive). Not that any actual browser cares, of course.

 --jonadab