added xml escape