Content outputs unescaped xml

[hen]

&, > and < go from escaped in the xml data files to unescaped in the outputted XML. Numeric entities aren't escaped.

Need to figure out how to escape them, especially &. Note that they aren't escaped when both the inner xml is pushed out for questions/answers, and when fields are pushed out, for example tag name.