properly sanitize xml