Stricter xml escaping