added XML encoding of eception text and locator, to fix XSS vulnerability