catch HTML-escaped entities in header text