temporarily switched off XSS filter (suspect it is the causes of garbling up XML instance)