using templating + escaping for XML+JSON inHTML

using templating + escaping for XML+JSON inHTML