I think that entities in the form ``&#xHEX;`` (where HEX is a hex value) are valid, too.