Fix #192: escape strings in config.xml