XML escaping.

Adds new utility function which escapes XML entities from strings and
uses that in `ExpressionNode`.