diff --git includes/common.inc includes/common.inc
index 1903646..b103d2b 100644
--- includes/common.inc
+++ includes/common.inc
@@ -1549,6 +1549,7 @@ function filter_xss_bad_protocol($string, $decode = TRUE) {
   // @todo Remove the $decode parameter in Drupal 8, and always assume an HTML
   //   string that needs decoding.
   if ($decode) {
+    require_once DRUPAL_ROOT . '/includes/unicode.inc';  
     $string = decode_entities($string);
   }
   return check_plain(drupal_strip_dangerous_protocols($string));