Fix #751. The query string is now XML escaped, as it is used as an
attribute value.
Merge pull request #752 from emmanuel-keller/1.5

Fix #751. The query string is now XML escaped, as it is used as an