Sanitize XML data
Merge pull request #725 from romainneutron/fix-1545

[3.8] Sanitize XML data