Update spec

The decode funtion now decodes only HTML invalid characters