+ XML sanitizer for model