Expat can call CharacterData() multiple times if the CDATA contains
entity references.  We need to collect all of them in one large
string.