This is OK now, but velocity tools are not quite a stable API. In the future, if the official tool merges all our custom functions, we might drop our own class in favor of the official `EscapeTool`. It would be better to use the `XMLScriptService`, available as `services.xml`.