Escape strings before going into XML.