in lib/utils/shared-strings.js:49

xmlEncode is used before adding the shared string causing HTML characters to appear in the strings table itself and in turn field values in sheet, I removed the xmlEncode and tried special characters (<>"'&) and it did not cause any problems in the shared strings table (it appears they are converted later anyway as looking at the generated source for sharedStrings.xml and they are encoded properly)