Can you rename this to `xmlEscape()`? Want to make sure there's no confusion between this and the non-standard `escape()` global.