sanitize respose to remove invalid XML character