The code was assuming consumeHTMLEntity() consumes all the input, which is not necessarily the case. This fixes cases where the reference is only part of the text. This is a cherry-pick from Blink: - https://chromium-review.googlesource.com/c/chromium/src/+/4305159
Pull request: https://github.com/WebKit/WebKit/pull/11888
Committed 262050@main (609c58ee5017): <https://commits.webkit.org/262050@main> Reviewed commits have been landed. Closing PR #11888 and removing active labels.
<rdar://problem/107164249>