ESI src URLs are not HTML decoded

[timkelty]

If you have something like:

<esi:include src="/foo?bar&amp;baz" />

The value is not decoded before passing to new URL(), which will result in an incorrect URL.
https://github.com/cdloh/cloudflare-esi/blob/main/src/processIncludes.ts#L95

In this case, & needs to first be decoded to &.

[cdloh]

Thanks for this. I'll work at getting this fixed sometime this week.