Sanitize XML data