use xml_escape filter