Escaping of the file list title in download list using example client and example modules is not correct.
Fix the escaping. This probably has to do with escaping in a HTML template for file list module. Smarty offers the escape filter, it can be applied to a variable using |escape in template.
Steps to reproduce:
Install example client with example modules
Go to Content -> Articles
Click on category Main Navigation -> Features -> Content -> Download list
Go to editor tab for Download List
Set a file list title. Make sure to use < and &
Check its escaping using page source in preview and editor