Must escape ampersands in XML