xml encoding

When the XML output is generated various of pieces of information are plugged into an XML template. Not of this data is encoded and this can break the generated XML.

For example, if your site slogan contains something like " ", this ends up in the description and then in the XML output as is, but the & needs to be encoded.

Couple of issues here. When using Drupal variables you may want to scrub all HTML tags. Second, all content plugged into XML needs to be encoded.