Seems like Google doesn't consider this issue serious (since it doesn't appear to be a security issue). I will continue using the microb patch for now and maybe we should consider putting that patch into CSSU (a slightly hackish patch to microb-engine that treats an & followed by a space as thought it was really & followed by a space seems better for users than wierd errors in Google half the time)