Why the heck did I reinvent the XML escaping in this old thing?
Start working toward PEP8 compliance for scripts/index.cgi