Add option to unescape script attributes.

The src attribute of a <script> can contain HTML-escaped characters such as "&amp;" in place of "&".  This change adds optional support for unescaping the script attributes.  (The default behavior is off for backwards compatibility.)