escape XML description strings in /api/experiments.xml output