In the XML writer, removed htmlspecialchars() calls in favor of a str_replace() targeting only "&", as that's the only problematic character.