[3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215)#133704