Update XML sanitizer method to allow more legal characters.

Fixes #297.