Decode html entities after sanitization