trivial: Sync the .spec file with downstream
Be more careful with untrusted XML data

xspim.desktop has '<keyword> </keyword>' which the parser accepts and gets added
to the metadata. Fix this both in the read and write side.