XML escaping.

Adds new utility function which escapes XML entities from strings and
uses that in `ExpressionNode`.
Merge pull request #9 from peelonet/xml-escaping

XML escaping.