Why: web.config is in the format of XML 1.0:
The ampersand character (&) and the left angle bracket (<) may appear in their literal form only when used as markup delimiters, or within acomment, a processing instruction, or a CDATA section. If they are needed elsewhere, they must be escaped using either numeric character references or the strings "
&" and "<" respectively