[protector] htmlpurify set mb_substitute_character