proper xml escape