I wouldn't have thought that this would be an issue because with what I have any xml "<"s or ">"s will be replaced with &lt; and &gt; Do you see an issue with how that could be exploited?