XML escape instead of CDATA