add sanitize for xml value