XML escape

Attribute contexts may need extra care; this covers common element text.