Regression fix: Lost ampersands in Character Reference State's Anything Else case

The Anything Else case of the Character Reference State discarded the
ampersand that had been consumed to enter the state. This led to e.g. in
the Data State, "&*" emitting only a "*" char token, when you'd expect
both a "&" and "*" char token.

This regressed in ee19894.

Author: JonathanO

source

@@ -103964,23 +103964,23 @@ dictionary <dfn>StorageEventInit</dfn> : <span>EventInit</span> {
 
   <h5><dfn>Character reference state</dfn></h5>
 
-  <p>Consume the <span>next input character</span>:</p>
+  <p>Set the <var data-x="temporary buffer">temporary buffer</var> to the empty string. Append
+   a U+0026 AMPERSAND (&amp;) character to the <var data-x="temporary buffer">temporary
+   buffer</var>. Consume the <span>next input character</span>:</p>
 
   <dl class="switch">
 
    <dt><span data-x="ASCII alphanumeric">ASCII alphanumeric</span></dt>
-   <dd><p>Set the <var data-x="temporary buffer">temporary buffer</var> to the empty string. Append
-   a U+0026 AMPERSAND (&amp;) character to the <var data-x="temporary buffer">temporary
-   buffer</var>. <span>Reconsume</span> in the <span>named character reference state</span>.</dd>
+   <dd><span>Reconsume</span> in the <span>named character reference state</span>.</dd>
 
    <dt>U+0023 NUMBER SIGN (#)</dt>
-   <dd><p>Set the <var data-x="temporary buffer">temporary buffer</var> to the empty string. Append
-   a U+0026 AMPERSAND (&amp;) character and the <span>current input character</span> to the <var
-   data-x="temporary buffer">temporary buffer</var>. Switch to the <span>numeric character reference
-   state</span>.</dd>
+   <dd>Append the <span>current input character</span> to the
+   <var data-x="temporary buffer">temporary buffer</var>. Switch to the <span>numeric character
+   reference state</span>.</dd>
 
    <dt>Anything else</dt>
-   <dd><span>Reconsume</span> in the <var data-x="return state">return state</var>.</dd>
+   <dd><span>Flush code points consumed as a character reference</span>. <span>Reconsume</span> in
+   the <var data-x="return state">return state</var>.</dd>
 
   </dl>
 
@@ -120685,6 +120685,7 @@ INSERT INTERFACES HERE
   Jonas Sicking,
   Jonathan Cook,
   Jonathan Neal,
+  Jonathan Oddy,
   Jonathan Rees,
   Jonathan Watt,
   Jonathan Worent,