Missing escape on sitemap.xml