xmlEscape replaces " with &quot;