Adding xml escape to name and description stab at bug#965506

I don't know that this is the best way to solve this.

It doesn't address locale based strings that also can end up in XML (lines 114 and on in apk_project_builder.js)