Might want to pass this through `xml_escape` too