decode htmlentities for urls in viewing candidate