protected function decodeEntity($match) { $hash = $this->xssHash(); $match = preg_replace('|\\&([a-z\\_0-9\\-]+)\\=([a-z\\_0-9\\-/]+)|i', $hash . '\\1=\\2', $match[0]); return str_replace($hash, '&', $this->entityDecode($match)); }