Escape ampersands in XML.