As it is passed as a special character, it converts & into %26
If it has space then it would be converted to %20
So make sure, you are not using constants like that. It renders properly in web browser as the browser converts or parses %26 to & symbol when rendering.
Thanks for the quick reply!
I should have mentioned that I used an example to demonstrate the issue. The actual query is pulling the value 'A & B' from a table where the VARCHAR2(240) column. It is populated by a free form text field which means that I need a solution for all special characters as well.