Don't forget to escape XML in attributes. Thanks to the Postgres Q&A room on...