[misc] Fixed missing XML-escaping