Protect against XML escaping