An HTML entity for carriage return 
 turns into an actual newline, which breaks the attribute and tag parsing. Since the newlines are useless anyway, we might want to handle this the same way as 
 and refuse to decode.

See also T390265: HTML entities in details attribute should round-trip