fixes information leakage vulnerability on REST XML outputs