Index: source
===================================================================
--- source	(revision 3145)
+++ source	(revision 3146)
@@ -72488,8 +72488,13 @@
   ampersand</dfn> is a U+0026 AMPERSAND (<code>&amp;</code>) character
   that is followed by some <span title="syntax-text">text</span> other
   than a <span>space character</span>, a U+003C LESS-THAN SIGN
-  character ('&lt;'), or another U+0026 AMPERSAND (<code>&amp;</code>)
-  character.</p>
+  character ('&lt;'), another U+0026 AMPERSAND (<code>&amp;</code>)
+  character, or, if the character is in an <span
+  title="syntax-attribute-value">attribute value</span>, one or more
+  characters in the ranges U+0030 DIGIT ZERO ..  U+0039 DIGIT NINE,
+  U+0041 LATIN CAPITAL LETTER A .. U+005A LATIN CAPITAL LETTER Z, and
+  U+0061 LATIN SMALL LETTER A .. U+007A LATIN SMALL LETTER Z, followed
+  by a U+003D EQUALS SIGN character (=).</p>
 
 
   <h4>CDATA sections</h4>
@@ -75185,9 +75190,15 @@
     column of the <span>named character references</span> table (in a
     <span>case-sensitive</span> manner).</p>
 
-    <p>If no match can be made, then this is a <span>parse
-    error</span>. No characters are consumed, and nothing is
-    returned.</p>
+    <p>If no match can be made, then no characters are consumed, and
+    nothing is returned. If the current state is not the
+    <span>character reference in attribute value state</span>, or the
+    U+0026 AMPERSAND character is not followed by one or more
+    characters in the ranges U+0030 DIGIT ZERO to U+0039 DIGIT NINE,
+    U+0041 LATIN CAPITAL LETTER A to U+005A LATIN CAPITAL LETTER Z,
+    and U+0061 LATIN SMALL LETTER A to U+007A LATIN SMALL LETTER Z,
+    followed by a U+003D EQUALS SIGN character (=), then this is also
+    a <span>parse error</span>.</p>
 
     <p>If the last character matched is not a U+003B SEMICOLON (<code
     title="">;</code>), there is a <span>parse error</span>.</p>