This is more reliable for ensuring everythign is escaped.
This allows different escaping for xml and json
Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>