The following query always fails with 400 error

$filter=Name eq ‘&’

Even after URL encoding, it still fails.

$filter=Name eq ‘%26’

It seems that Web API will decode the URL and still send the & to OData URL parser.

The same issue doesn't repro in http://services.odata.org/OData/OData.svc/Products?$filter=Name+eq+'%26'