Ensure &amp; and other XML entities are decoded. #4013.