fix string format bug in XmlSanitizingStream