disallow xml again