Handle htmlspecialchars() differences between PHP < 5.4 vs >= 5.4

For htmlspecialchars, it seems that newer PHP versions allow specifying
ENT_XML1, but default to ENT_HTML401.  Older versions default to ENT_XML1
Go figure.  #PHPWTF