Reviewer AMC: Add xml escaping function

Serious question:  do we need an unescape function (e,g, for parsing XML from the HSS?)