Don't turn off allow-inline-xml.