testing xml_escape