[BUGFIX] Use PHP native htmlspecialchars_decode()