4.0: escape_once is double-escaping hex-encoded entities

related to #9088