XML now safe

Attributes referened by name, not possition