make some strings xml-safe