Make escape_once respect hexadecimal references

The regex for escape once recognises decimal numeric character
references and character entity references, but not hexadecimal
numeric character references.

Add hexadecimal references to the regex.
Merge pull request #633 from haml/escape-once-hexadecimal

Make escape_once respect hexadecimal references