add CDATA to xstream parser and move all secure method to shared.