Proper escaping in {Query,Filter}Model::asXML().