Values are now escaped for XML characters