mozilla/apk-factory-service — pull request #37 by ozten (2014-01-30 21:35:04+00:00)
Title: Adding xml escape to name and description stab at bug#965506

I don't know that this is the best way to solve this.

It doesn't address locale based strings that also can end up in XML (lines 114 and on in apk_project_builder.js)