Use xml-escape (= 1.0.0) to sanatize XML instead of custom method

As discussed this replaces the custom escapeXML function with the xml-escape library.