WEB: use html_entity_decode() when decoding entities

This removes the hacky hardcoded table. Thanks to DrMcCoy for his help.