Strip out xml control characters