Fixed a bug in the XML tokenizer w.r.t. char references