Update xml.php

If we do not use htmlspecialchars, you can get an error ("EntityRef: expecting ';')
Merge pull request #4 from CarlosAdrianM/patch-1

Update xml.php