update escape xml and json