adding proper escaping into the generated xml
Merge pull request #1 from heckler/master

Using escape() in the generated output