The default call to XML() should be safe enough to prevent XSS attacks.
Attach a file by drag & drop or click to upload
Mathieu Giraud authored