I still think you need to XML-escape at least some of these strings.