linkifyCode passes HTML to the linkifier (because it musts: #510), but this means that & is first escaped and this causes some URls to break. Example:

"<img src='https://avatars1.githubusercontent.com/u/1402241?v=3&;s=40'>"
//                               The parameters should be: ?v=3&s=40

See it here in action: https://github.com/bfred-it/sandbox/blob/master/index.js

A solution I could think of would be to have the linkifier return actual DOM nodes so we don't have to inject plain HTML and this means we can pass unescaped data to it.