escapeHTML helps us not choking when we get strange characters, like `<` or `'` or `"`.

however, I don't know if the HTML entities like `&amp;` `&lt;` etc are appropriate in XML. We maybe need another function that would encode them in &XXX; where XXX is a number.

but we _need_ to protect ourselves against this.