Bug 870317 fix unicode entity escaping

Pulling in the bleach.js fix:
https://github.com/asutherland/bleach.js/commit/f6e96d6a9f2e7b5e200c4b1dfa3b3797c8e1dcc4