Use `he` for robust HTML entity decoding