escaping xml snippets