add xml deny functions