westonruter/json-xml-rpc — pull request #2 by mindplay-dk (2012-07-18 20:51:43+00:00)
Title: add missing XML-encoding

Strings were not being XML-encoded - at all.

It looks like this was never implemented - the code looked like this:

xml.push(value.replace(/[<>&]/, function(ch){

})); //escape for XML!

Maybe "escape for XML!" was actually intended as a to-do... the same comment was present in one other place where no escaping was being performed - fixed in both places.