CBXSanitizer::_decode

protected function _decode($str)
	{
		$str = preg_replace_callback("/&#(d+)([^d])/is", array("CBXSanitizer", "_decode_cb"), $str);
		$str = preg_replace_callback("/&#x([da-f]+)([^da-f])/is", array("CBXSanitizer", "_decode_cb_hex"), $str);
		return str_replace(array(":","&tab;","&newline;"), array(":","t","n"), $str);
	}