To fix ” The reference to entity “oid” must end with the ‘;’ delimiter.”, use & instead of & symbol in the URL.
Sample URL:
https://test-dev-ed–c.na30.content.force.com/servlet/servlet.ImageServer?id=01536000001ZLBP&oid=00D36700000aU1