$cmsPathway->addItem( $item->name, str_replace('&', '&', $item->link) );
$cmsPathway->addItem( $item->name, htmlspecialchars( $item->link, ENT_QUOTES, 'UTF-8', false ) ); // ensure ampersands encoded