Un-escapes an XML-escaped string.

def xhtml_unescape(value: Union[str, bytes]) -> str:
    """Un-escapes an XML-escaped string."""
    return re.sub(r"&(#?)(\w+?);", _convert_entity, _unicode(value))