Escape values going into XML files where they may contain code samples.

In particular I found that in the jslintXml report that the "evidence" field contained a good portion of code, and therefore some characters that need to be escaped for the XML report.

I've also escaped the message fields as I'm not sure exactly what values they can take.