fix xmlEncode

Otherwise, you get
```xml
<?xml version="1.0"?>
<items>
  <item uid="uid'" arg="arg'" valid="valid" autocomplete="autocomplete">
    <title>title'</title>
    <subtitle>subtitle'</subtitle>
    <icon>icon.png'</icon>
  </item>
</items>
```

extra ' is added to each item