bug fix: within to_xml summary items are now escaped