Substitute XML entities (fixes #3)