escapeXml.js

function escapeXml(s) {
    return s.replace(/([&<>'"])/g,
        function (c) {
            return "&" + {
                "&": "amp",
                "<": "lt",
                ">": "gt",
                "'": "apos",
                '"': "quot"
            }[c] + ";";
        });
}