Add a test to make sure XML is escaped properly