use ent2ncr to sanitize xml