Defensive use of xml_encode()