[utils] Fix unescapeHTML for misformed string like "&a"" (#13935)