tokenizer: Fixed handling of text containing `&` when decoding entities

fixes https://github.com/fb55/DomHandler/issues/10