PHP 5.4 이상부터 의미가 없어진 변수 입력 제거

* [매뉴얼](https://secure.php.net/en/htmlspecialchars)에서 기본값이 되었다고 설명함.
* 빼먹은 `LOCK_EX` 다시 추가.

classes/security/htmlpurifier/library/HTMLPurifier/Lexer.php

@@ -125,7 +125,7 @@ class HTMLPurifier_Lexer
                 default:
                     throw new HTMLPurifier_Exception(
                         "Cannot instantiate unrecognized Lexer type " .
-                        htmlspecialchars($lexer, ENT_COMPAT | ENT_HTML401, 'UTF-8', false)
+                        htmlspecialchars($lexer)
                     );
             }
         }
@@ -279,7 +279,7 @@ class HTMLPurifier_Lexer
     protected static function CDATACallback($matches)
     {
         // not exactly sure why the character set is needed, but whatever
-        return htmlspecialchars($matches[1], ENT_COMPAT, 'UTF-8', false);
+        return htmlspecialchars($matches[1], ENT_COMPAT, 'UTF-8');
     }
 
     /**