We can only remove numbers from this list if they’re still in `invalid-code-points.json`, since we need to throw an error for them when the `strict` setting is used. E.g. `he.decode("&#x0D;", { 'strict': true})` should throw.