HTML Control is Encoding Special Characters

I am trying to use the HTML control to embed a YouTube video. The built in YouTube and/or Video controls do not do what I need, in particular, they do not allow me to insert parameters to control how the video plays. However, the HTML control really isn’t working for this purpose either as it keeps replacing the ampersands (&) contained within the URL QueryString with “&”.

I need for the ampersands to remain ampersands and not be HTML encoded. When these characters are encoded, the functionality breaks. I need for the URL to be like http://www.someurl.com/somepage.asp?param1=1&param2=2 and not have those ampersands converted to HTML encoded characters.

How do I accomplish that?

Here is an example of what I am inputting:

<iframe width="560" height="315" src="https://www.youtube.com/embed/XXXXXXX?controls=0&autoplay=1&iv_load_policy=3&loop=1&modestbranding=1" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe>

And here is what it is being converted to:

<iframe width="560" height="315" src="https://www.youtube.com/embed/XXXXXXX?controls=0&autoplay=1&iv_load_policy=3&loop=1&modestbranding=1" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe>