fix #467 on ACL allowed urls with html special chars such as & conver…

…ted to &

web/plugin/core/acl/fn.php

@@ -123,7 +123,7 @@ function acl_geturl($acl_id) {
 	$urls = explode(',', $list[0]['url']);
 	foreach ($urls as $key => $val) {
 		if (trim($val)) {
-			$ret[] = trim($val);
+			$ret[] = trim(htmlspecialchars_decode($val));
 		}
 	}