Strip forbidden XML character