db options and escape XML